7272 matches found
Race condition
A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Non Stop Routing NSR scenario, an unexpected kernel restart might be observed if "bgp auto-discovery" is enabled and if there ...
CVE-2023-22398 Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs
An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...
CVE-2023-22396 Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)
An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine RE of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ultimately leads to a Denial of Service Do...
CVE-2023-22406 Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF
A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flap...
CVE-2023-22402 Junos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flaps
A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Non Stop Routing NSR scenario, an unexpected kernel restart might be observed if "bgp auto-discovery" is enabled and if there ...
CVE-2023-22396
CVE-2023-22396 describes an Uncontrolled Resource Consumption vulnerability in the TCP processing on the Routing Engine of Juniper Networks Junos OS. An unauthenticated network-based attacker can send crafted TCP packets destined to a device interface (IPv4/IPv6), causing an MBUF leak and ultimat...
CVE-2023-22398: Access of Uninitialized Pointer
An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...
CVE-2023-22396: Uncontrolled Resource Consumption
An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine RE of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ultimately leads to a Denial of Service Do...
Juniper Junos OS Vulnerability (JSA70181)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70181 advisory. - An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attack...
PT-2023-1289 · Juniper Networks · Junos Evolved +1
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 18.4R2-S7 Juniper Networks Junos OS versions 19.1 prior to 19.1R3-S2 Juniper Networks Junos OS versions 19.2 prior to 19.2R3 Juniper Networks Junos OS versions 19.3 prior to 19.3R3 Juniper Networks...
KubeOperator allows unauthorized access to system API
Summary Unauthorized access refers to the ability to bypass the system's preset permission settings to access some API interfaces. The attack exploits a flaw in how online applications handle routing permissions. Affected Version = v3.16.3 Patches The vulnerability has been fixed in v3.16.3...
PT-2023-18532 · Unknown · Kubeoperator
Name of the Vulnerable Software and Affected Versions: KubeOperator versions 3.16.3 and below Description: The issue allows unauthorized access to API interfaces, potentially leaking sensitive information and allowing takeover of the cluster under certain conditions. This is due to a flaw in...
PT-2023-18530 · Kubepi · Kubepi
Name of the Vulnerable Software and Affected Versions: KubePi versions prior to 1.6.4 Description: The issue allows unauthorized access to system API interfaces, potentially leaking sensitive information. This is due to a flaw in how online applications handle routing permissions. There are no...
GHSA-4348-X292-H437 Duplicate Advisory: GoBase Race Condition vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h2x7-2ff6-v32p. This link is maintained to preserve external references. Original Description A race condition can cause incorrect HTTP request routing...
Race condition
A race condition can cause incorrect HTTP request routing...
CVE-2022-2583 Race condition in github.com/ntbosscher/gobase
A race condition can cause incorrect HTTP request routing...
CVE-2022-2583 Race condition in github.com/ntbosscher/gobase
A race condition can cause incorrect HTTP request routing...
CVE-2022-2583 Race condition in github.com/ntbosscher/gobase
A race condition can cause incorrect HTTP request routing...
CVE-2022-2583
CVE-2022-2583 describes a race condition in the GoBase library (github.com/ntbosscher/gobase) that can lead to incorrect HTTP request routing. The core issue is a concurrency/problem in GoBase that affects request routing logic, with a base CVSS v3.1 score of 3.7 (LOW) from NVD/Security CVSS data...
