5772 matches found
The vulnerability of the Routing Protocols Daemon (RPD) implementation in the JunOS operating system allows a hacker to induce a service failure.
The vulnerability of the Routing Protocols Daemon RPD implementation in the JunOS operating system is related to errors in packet processing for the PIM Join protocol. Exploiting this vulnerability can allow an attacker to trigger a device reboot and a service failure...
The vulnerability of the Junos operating system, related to incorrect data processing, allows a perpetrator to trigger a service failure.
The vulnerability of the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to a failure in the routing daemon process rpd...
The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.
The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to a failure in the routing daemon process rpd...
Comodo KORUGAN LITE 1.6.5.1024 Cross Site Scripting
Exploit Title: Comodo KORUGAN LITE 1.6.5.1024 | Cross-Site Scripting Date: 18.01.2019 Exploit Author: Ozer Goker Vendor Homepage: https://www.korugan.com/koruganlite.php Software Link: https://download.comodo.com/korugan/Korugan-Lite.ova Version: 1.6.5.1024 Introduction Korugan Unified Threat...
CVE-2019-0009
On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. In a virtual chassis VC deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms...
CVE-2019-0013
The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service DoS condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this...
CVE-2019-0003
When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon rpd process to crash with a core file being generated. Affected...
CVE-2019-0012 Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message
A Denial of Service DoS vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended...
CVE-2019-0009
Technical details about CVE-2019-0009 are not publicly available in the provided Connected documents. Monitor for updates from the sources referenced (e.g., Juniper JSA/JPD, CVE feeds) for new information or fixes.
Denial Of Service (DoS)
routing is vulnerable to denial of service DoS attacks. The vulnerability exists as routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to...
Cisco IOS and Cisco IOS XE Software Secure Shell Server Access Control Error Vulnerability
Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. An Access Control Error vulnerability exists in the Secure Shell SSH server in Cisco IOS and Cisco IOS XE Software, which stems from a lack of program detection. An attacker could exploit the...
Junos OS: pd crash on VPLS PE upon receipt of specific BGP message (JSA10912)
According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability which allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeate...
Cisco Policy Suite for Mobile and Policy Suite Diameter Routing Agent Access Bypass Vulnerabilities
A security vulnerability exists in the Redis implementation process in Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent. A remote attacker could exploit the vulnerability to modify the key-value pairs of transient events stored by the Redis server...
CVE-2018-0484
A vulnerability in the access control logic of the Secure Shell SSH server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding VRF instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a...
Design/Logic Flaw
A vulnerability in the access control logic of the Secure Shell SSH server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding VRF instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a...
CVE-2019-5892
Vulnerability: CVE-2019-5892 affects FRRouting (FRR) bgpd in versions 2.x/3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2. Root cause: ENABLE_BGP_VNC handling for Virtual Network Control does not implement RFC 7606, causing BGP UPDATE packets with attribute 255 to be tr...
Authentication flaw
A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to...
CVE-2018-0181
A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to...
CVE-2018-0181
A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to...
CVE-2018-0181
Technical details on CVE-2018-0181 are not publicly provided in the connected documents. Monitor for updates; the Cisco advisory notes remediation efforts but does not specify affected versions or concrete fix details in the supplied texts.