6937 matches found
PT-2017-1973
Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1R4-S7, 15.1R5-S2, 15.1R6 Junos OS versions 15.1X49 prior to 15.1X49-D78, 15.1X49-D80 Junos OS versions 15.1X53 prior to 15.1X53-D230, 15.1X53-D63, 15.1X53-D70 Junos OS...
Juniper Junos Routing Process Daemon BGP UPDATE DoS (JSA10778)
According to its self-reported version and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing protocol daemon rpd when handling a specially crafted BGP UPDATE. An unauthenticated, remote attacker can exploit this to repeatedly crash and...
Juniper Junos Routing Protocol Daemon LDP Packet DoS (JSA10777)
According to its self-reported version and configuration, the remote Juniper Junos device is affected by a memory leak issue in the routing protocol daemon rpd when handling a specific LDP packet, which over time will consume memory that cannot be freed without restarting the rpd process. An...
Juniper NorthStar Controller Application Remote Elevation of Privilege Vulnerability
NorthStar is Juniper's SDN controller that dynamically builds SR TE-LSPs and observes labeling information for each link, LSP. Also based on traffic distribution, SR LSPs can be dynamically optimized. A remote elevation of privilege vulnerability exists in the Juniper NorthStar controller...
CVE-2015-3281 HAProxy vulnerabilities | Cloud Foundry
Severity Medium Vendor HAProxy Versions Affected HAProxy 1.5.x Description It was discovered that HAProxy incorrectly handled certain buffers. A remote attacker could possibly use this issue to obtain sensitive information belonging to previous requests. Affected Products and Versions Severity is...
CentOS 6 : quagga (CESA-2017:0794)
An update for quagga is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
quagga security update
CentOS Errata and Security Advisory CESA-2017:0794 An update for quagga is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2017-6552
Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for...
Design/Logic Flaw
Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for...
CVE-2017-6552
Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for...
CVE-2017-6552
CVE-2017-6552 affects Livebox 3 (Sagemcom SG30_sip-fr-5.15.8.1). The vulnerability is an insufficiently large default IPv6 routing table size, which can be filled in minutes, allowing a remote attacker to cause a denial-of-service by rendering the device unresponsive for voice, internet, and TV s...
CVE-2017-6552: Uncontrolled Resource Consumption
Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for...
PT-2017-17151
Name of the Vulnerable Software and Affected Versions Livebox 3 Sagemcom SG30 sip-fr version 5.15.8.1 Description The issue is related to an insufficiently large default value for the maximum IPv6 routing table size, which can be filled within minutes. An attacker can exploit this to render the...
[SECURITY] Fedora 24 Update: quagga-0.99.24.1-5.fc24
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...
tcpdump buffer overflow vulnerability (CNVD-2017-02325)
tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in several functions of the...
Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation
Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation Vendor: Cimetrics, Inc. Product web page: https://www.cimetrics.com Affected version: 6.2f Summary: BACstac belongs to product BACstacTM Networking Software and was developed by company Cimetrics Inc. Cimetrics is excited to announ...
[SECURITY] Fedora 25 Update: quagga-0.99.24.1-5.fc25
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...
WordPress REST API content injection vulnerability analysis-vulnerability warning-the black bar safety net
Author: Lucifaer 0x00 vulnerability description 1. Vulnerability description In the REST API automatically included in Wordpress4. 7 or more version, the WordPress REST API provides a set of easy-to-use HTTP endpoint, you can use the user in a simple JSON format to access the site's data,...
I got emails - G Suite Vulnerability
After recent finding about Uber and SendGrid bug, I decided to check other third party applications that were also used for similar cases. During the investigation, some third party applications were found to be vulnerable including G Suite. The initial research of this vulnerability started when...