bgpd/bgp_packet.c Out-of-Memory Disclosure DoS

The vulnerability of the bgpd/bgppacket.c file in the networking routing implementation software for Unix-like systems in FRRouting is related to reading the initial byte of the ORF header during a race condition. Exploiting this vulnerability can allow a malicious actor to disclose sensitive...

Network routing Memory Release DoS

The vulnerability of the FRRouting software for implementing network routing on Unix-like systems is related to the improper processing of the BGP UPDATE message created with the MPUNREACHNLRI attribute and additional data NLRI. Exploiting this vulnerability can allow a malicious actor to cause...

OESA-2024-1707 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free of encap entry in neigh update handler Function mlx5erepneighupdate wasn't updated to accommodate rtnl lock removal from TC filter...

Fortinet FortiClient TunnelVision - CVE-2024-3661 (FG-IR-24-170)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-170 advisory. - DHCP can add routes to a client's routing table via the classless static route option 121. VPN-based security solutions...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Circumvention of security measure - Remote code execution Administrator/Root rights - Remote code...

CVE-2024-30095

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-30095

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-30095

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-30094

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-30094

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-30095 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

Microsoft Windows Routing and Remote Access Service Security Vulnerability

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

PT-2024-4276

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description The issue is related to a buffer overflow in the heap of the Windows Routing and Remote Access Service RRAS, which can be exploited to execute arbitrary...

PT-2024-4271

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description The issue is related to a buffer overflow in the heap of the Windows Routing and Remote Access Service RRAS, which can be exploited to execute arbitrary...

CVE-2024-30095: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-30094: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

Microsoft Windows Routing and Remote Access Service Security Vulnerability

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

CVE-2024-22279

Improper handling of requests in Routing Release v0.273.0 and = v0.297.0 allows an unauthenticated attacker to degrade the service availability of the Cloud Foundry deployment if performed at scale...

CVE-2024-22279 GoRouter Denial of Service Attack

Improper handling of requests in Routing Release v0.273.0 and = v0.297.0 allows an unauthenticated attacker to degrade the service availability of the Cloud Foundry deployment if performed at scale...

CVE-2024-22279

CVE-2024-22279 affects Cloud Foundry routing (GoRouter). The issue is an improper handling of requests in Routing Release versions v0.273.0 up to and including v0.297.0, allowing an unauthenticated attacker to degrade service availability at scale (DoS). Affected products: Routing Release and CF ...