5789 matches found
frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c
A flaw was found in frr. Processing a malformed request with no attributes may cause a NULL pointer dereference, resulting in a denial of service...
frr: mishandled malformed data leading to a crash
A data mishandling vulnerability was found in FRRouting. A malformed MPREACHNLRI data can lead to a crash, resulting in a denial of service...
frr: incorrect length check in bgp_capability_llgr() can lead do DoS
A flaw was found in frr that may allow a remote attacker to cause a denial of service via the bgpcapabilityllgr function...
kernel: ipv4: NULL pointer dereference in ipv4_send_dest_unreach()
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer skb was assumed to be associated with a device before calling ipoptionscompile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAPNETADMIN privileges t...
ALSA-2024:2156 Moderate: frr security update
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fixes: frr: incorrect length check in bgpcapabilityllgr can lead do DoS CVE-2023-31489 frr: missing length check in bgpattrpsidsub ca...
Debian dla-3797 : frr - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3797 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3797-1 [email protected]...
Improper Access Control
github.com/ipfs/kubo/ is vulnerable to Improper Access Control. The vulnerability is due to the ability of an attacker to generate ephemeral identities, allowing them to exploit the IPFS connection management reputation system. This enables the attacker to poison other nodes' routing tables,...
GHSA-R23H-3JMW-Q7HR Access Restriction Bypass in go-ipfs
An issue was discovered in IPFS aka go-ipfs 0.4.23. An attacker can generate ephemeral identities Sybils and leverage the IPFS connection management reputation system to poison other nodes' routing tables, eclipsing the nodes that are the target of the attack from the rest of the network. Later...
Cisco IOS XE Software 安全漏洞
Cisco IOS XE Software is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that stems from...
The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CLSA-2024-1713791075 Fix of 12 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-23307 - md/raid5: fix atomicity violation in raid5cachecount CVE-url: https://ubuntu.com/security/CVE-2021-46932 - Input: appletouch - initialize work before device registration CVE-url: https://ubuntu.com/security/CVE-2021-46936 - net: fix...
[SECURITY] Fedora 38 Update: python-aiohttp-3.9.3-3.fc38
Python HTTP client/server for asyncio which supports both the client and the server side of the HTTP protocol, client and server websocket, and webservers with middlewares and pluggable routing...
The vulnerability of the Routing Engine module in Juniper Networks Junos OS networking devices of the EX4300 series allows a attacker to compromise the integrity of protected information.
The vulnerability of the Routing Engine RE module in Juniper Networks’ Junos OS networking devices of the EX4300 series is related to the incorrect implementation of the sequence of actions when using a firewall filter for IPv6 packet reception. Exploiting this vulnerability can allow an attacker...
The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.
The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to improper syntax validation during input processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Buffer Overflow
libfrr.so is vulnerable to Buffer Overflow. The vulnerability is due to inadequate validation of the size of Segment Routing subTLVs in ospfteparseri function within ospfte.c. An attacker can trigger this vulnerability by crafting OSPF LSA packets with maliciously crafted Segment Routing subTLVs...
The vulnerability of the Daemon Routing Protocols (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.
The vulnerability of the Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient validation of input data types during a established BGP session. This occurs due to incorrectly defined Tunnel encapsulation attributes with incorre...
Juniper Junos OS Vulnerability (JSA75743)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75743 advisory. - A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based attacker to...
The vulnerability of the Daemon Routing Protocols (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.
The vulnerability of the Daemon Routing Protocols RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
UBUNTU-CVE-2024-26852
In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6routempathnotify syzbot found another use-after-free in ip6routempathnotify 1 Commit f7225172f25a "net/ipv6: prevent use after free in ip6routempathnotify" was not able to fix the root cause. We...