The vulnerability of the Junos OS’ Routing Protocol Daemon (RPD) allows a attacker to cause a service failure.

The vulnerability of the Junos OS’ Routing Protocol Daemon RPD is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Virtuozzo 7 : readykernel-patch (VZA-2019-042)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - A use-after-free vulnerability was found in the way KVM implements its device control API. When a device is created...

Virtuozzo 7 : readykernel-patch (VZA-2019-045)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - A use-after-free vulnerability was found in the way KVM implements its device control API. When a device is created...

Virtuozzo 7 : readykernel-patch (VZA-2019-046)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - A use-after-free vulnerability was found in the way KVM implements its device control API. When a device is created...

CVE-2019-20422

In the Linux kernel before 5.3.4, fib6rulelookup in net/ipv6/ip6fib.c mishandles the RT6LOOKUPFDSTNOREF flag in a reference-count decision, leading to for example a crash that was identified by syzkaller, aka CID-7b09c2d052db...

CVE-2020-1603

Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress the RE, at which point a mbuf memory leak occurs within the...

CVE-2020-1604

On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets to fail. This issue only affects firewall filter evaluation of certain packets destined to the device Routing Engine RE. This issue does...

CVE-2020-1603

Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress the RE, at which point a mbuf memory leak occurs within the...

CVE-2020-1600

In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...

Memory corruption

Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress the RE, at which point a mbuf memory leak occurs within the...

Design/Logic Flaw

In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...

Design/Logic Flaw

On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets to fail. This issue only affects firewall filter evaluation of certain packets destined to the device Routing Engine RE. This issue does...

CVE-2020-1603 Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.

Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress the RE, at which point a mbuf memory leak occurs within the...

CVE-2017-18509

A flaw was found in the Linux kernel’s net/ipv6/ip6mr.c function where setting a specific socket option can cause an inetcsklistenstop general protection fault. An attacker with CAPNETADMIN style privileges inside a container, can crash the system or execute arbitrary code when issuing a speciall...

Juniper Networks Junos OS SNMP Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Routing Protocol Daemon RPD in Juniper Networks Junos OS. An attacker could exploit...

Fedora Update for bird FEDORA-2019-ff0f9ce167

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cisco IOS Forwarding Information Base DoS (cisco-sa-20180328-FIB-dos)

According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in the Forwarding Information Base code due to a limitation in the way the FIB is internally representing recursive routes. An unauthenticated, network attacker can exploit this, by injecting...

Cisco IOS XE Software Forwarding Information Base DoS (cisco-sa-20180328-FIB-dos)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Forwarding Information Base code due to a limitation in the way the FIB is internally representing recursive routes. An unauthenticated, network attacker can exploit this, by...

Arbitrary File Download Vulnerability in Aifei Routing System

LoveFast Routing System is a DPI-based network management system. There is an arbitrary file download vulnerability in AIFRS, which can be exploited by attackers to download arbitrary files and obtain sensitive information...

Security Bulletin: IBM i is affected by an OSPF vulnerability (CVE-2017-1460)

Summary IBM i OSPF is affected by this security vulnerability. IBM i has addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-1460 DESCRIPTION: IBM i OSPF is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of...