5771 matches found
Circle with Disney Token Routing Vulnerability
Summary An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet can make the Circle cloud route a packet to any arbitrary Circle device. An attacker needs network connectivity to the Internet to trigger this vulnerability. Tested...
[SECURITY] [DSA 4011-1] quagga security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4011-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2017 https://www.debian.org/security/faq -...
openSUSE Security Update : tcpdump (openSUSE-2017-1205)
This update for tcpdump to version 4.9.2 fixes several issues. These security issues were fixed : - CVE-2017-11108: Prevent remote attackers to cause DoS heap-based buffer over-read and application crash via crafted packet data. The crash occured in the EXTRACT16BITS function, called from the...
The vulnerability of the Locator/ID Separation (LISP) protocol implementation in Cisco IOS allows a hacker to bypass the authentication process.
The vulnerability of the Locator/ID Separation LISP protocol implementation in Cisco IOS is related to defects in the authentication process logical error. Exploiting this vulnerability allows a malicious actor to bypass the authentication process by using special registration requests that trigg...
Juniper Junos BGP Update Vulnerability (JSA10820)
According to its self-reported version number, the remote Junos device is affected by a vulnerability in the 'bgp-error-tolerance' feature that when enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. TRUSTED...
Juniper Junos OS Denial of Service Vulnerability
Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a security vulnerability. An attacker could exploit this vulnerability to cause a denia...
Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-32281)
Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Junos OS version 16.1R1. An attacker could exploit this vulnerability to cause ...
Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-33973)
Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Junos OS version 16.1R1. An attacker could exploit this vulnerability to cause ...
Design/Logic Flaw
When the 'bgp-error-tolerance' feature " designed to help mitigate remote session resets from malformed path attributes " is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. Devices with BGP enabled that d...
CVE-2017-10618
When the 'bgp-error-tolerance' feature " designed to help mitigate remote session resets from malformed path attributes " is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. Devices with BGP enabled that d...
NIELD v0.6.1 - Network Interface Events Logging Daemon
NIELD Network Interface Events Logging Daemon is a tool to receive notifications from kernel through netlink socket, and generate logs related to interfaces, neighbor cache ARP,NDP, IP address IPv4,IPv6, routing, FIB rules, traffic control. Download $ git clone https://github.com/t2mune/nield.git...
Open redirect
In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to append a combination of characters to the URL that will allow for an open redirect. An attacker could exploit this as a phishing attack to gain...
Cisco IOS XE Software Authentication Bypass Vulnerability
Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the implementation of the Locator/ID Separation Protocol LISP in Cisco IOS XE. A remote attacker could exploit this vulnerability to bypass authenticatio...
CVE-2017-8047: Cloud Foundry router open redirect | Cloud Foundry
Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions routing-release All versions prior to v0.163.0 cf-release All versions prior to v274 Please note: due to a bug in 274, it is not recommended for production use. Deployments should use v275 or later...
Quagga Denial of Service Vulnerability (CNVD-2017-35374)
Quagga is a routing software suite developed by American software developer Kunihiro Ishiguro. The suite implements OSPFv2, OSPFv3, RIP v1/v2 and other protocols on multiple platforms and provides route redistribution, route mapping and other features. A denial of service vulnerability exists in...
Tcpdump IPv6 routing header parser buffer overflow vulnerability (CNVD-2017-27605)
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.IPv6 routing header parser is one of the IPv6 routing header parser...
CVE-2017-13725
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...
CVE-2017-13725
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...