[SECURITY] Fedora 41 Update: fastd-23-1.fc41

fastd is a secure tunneling daemon with some unique features: - Very small binary about 100KB on OpenWRT in the default configuration, including all dependencies besides libc - Exchangable crypto methods - Transport over UDP for simple usage behind NAT - Can run in 1:1 and 1:n scenarios - There a...

Jellystat path traversal vulnerability

Jellystat is a free open source statistics application from the individual developer Thegan Govender. A path traversal vulnerability exists in versions of Jellystat prior to 1.1.2, which stems from the direct use of user input in routing, resulting in a path traversal vulnerability that allows th...

RIB Revalidation DoS

The vulnerability of the RIB Revalidation component of the networking routing implementation software on Unix-like systems is related to errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux kernel IPMR IP6MR DoS

The vulnerability of IPMR and IP6MR components in Linux operating systems is related to improper blocking mechanisms. Exploiting this vulnerability can allow attackers to cause service failures...

USN-7230-1: Quagga vulnerability

Iggy Frankovic discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service...

ROS-20250121-04

A vulnerability in the RIB Revalidation component of a software tool that implements network routing on Unix-like FRRouting systems is related to the launch of RIB reanalysis for FRR routers. Unix-like FRRouting systems is related to triggering RIB reanalysis for FRR routers, using RTR, causing...

Wavlink AC3000 Router Arbitrary Command Execution

The vulnerability of the setaddrouting function in the internet.cgi script of the Wavlink AC3000 WL-WN533A8 router microprogramming system is related to the lack of data cleaning at the control level when processing the netmask parameter. Exploiting this vulnerability allows a remote attacker to...

SUSE CVE-2024-7595

GRE and GRE6 Protocols RFC2784 do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can be considered simil...

AlmaLinux 9 : Security and bug fixes for NetworkManager (Medium) (ALSA-2025:0377)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:0377 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its...

Oracle Linux 9 : and / bug / fixes / for / NetworkManager (ELSA-2025-0377)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0377 advisory. 1.48.10-5.0.1 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 1:1.48.10-5 - vpn: Support routi...

Moderate: Red Hat Security Advisory: Security and bug fixes for NetworkManager

Security and bug fixes for NetworkManager NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well...

Security and bug fixes for NetworkManager

1.48.10-5.0.1 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 1:1.48.10-5 - vpn: Support routing rules in vpn conenctions RHEL-73167 - vpn: Place gateway route to table defined in ipvx.route-table RHEL-73166 1:1.48.10-4 - Remove...

ALSA-2025:0377 Moderate: Security and bug fixes for NetworkManager

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

Demon Routing Protocol Daemon Denial-of-Service

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending...

Demon Routing Protocol Daemon Denial-of-Service

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service attack by sending...

Demon Routing Protocol Daemon Denial-of-Service

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service attack by...

RHEL 9 : Securityes for NetworkManager (Moderate) (RHSA-2025:0377)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0377 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when availabl...

Moderate: Security and bug fixes for NetworkManager

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

Windows Routing and Remote Access Code Execution

The vulnerability of the Windows Routing and Access Service RRAS on Microsoft Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2024-39763

Multiple OS command injection vulnerabilities exist in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A...