CVE-2023-22781

CVE-2023-22781 corresponds to buffer overflow vulnerabilities in ArubaOS/InstantOS services accessible via the PAPI UDP port 8211, permitting unauthenticated remote code execution as a privileged OS user. Multiple connected sources (NVD, Tenable ISA, CISA/ICS advisories, and CSAF entries) describ...

CVE-2023-22781 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities...

CVE-2023-22781 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities...

CVE-2023-22780

CVE-2023-22780 describes buffer overflow vulnerabilities in Aruba PAPI (UDP 8211) components across ArubaOS/InstantOS that enable unauthenticated remote code execution with privileges on the underlying OS. Multiple connected sources corroborate the same vulnerability pattern and affected products...

CVE-2023-22780 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities...

CVE-2023-22780 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities...

CVE-2023-22779 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities...

CVE-2023-22779

Summary (CVE-2023-22779): The vulnerability is a buffer-overflow in Aruba/PAPI handling that enables unauthenticated remote code execution via specially crafted UDP packets to port 8211. Affected software includes ArubaOS/InstantOS (Aruba management stack) with potential execution of code as a pr...

PT-2023-18693 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access point versions affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services, potentially leading to unauthenticated remote code execution. This can be achieved by...

EulerOS 2.0 SP11 : net-snmp (EulerOS-SA-2023-1764)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a...

EulerOS 2.0 SP11 : net-snmp (EulerOS-SA-2023-1786)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a...

PT-2023-18688 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access points affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services. These vulnerabilities could lead to unauthenticated remote code execution by sending speciall...

CVE-2023-29552: Abusing the SLP Protocol to Launch Massive DDoS Amplification Attacks

On April 25, 2023, researchers at Bitsight and Curesec jointly discovered a high-severity vulnerability — tracked as CVE-2023-29552 — in the Service Location Protocol SLP, a legacy Internet protocol. What is SLP protocol? Service Location Protocol SLP is a network protocol designed to simplify th...

CVE-2023-29163

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Code injection

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-29163 BIG-IP UDP Profile vulnerability

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-29163

Summary: CVE-2023-29163 affects F5 BIG-IP’s UDP profile when Idle Timeout is set to Immediate or 0, causing the Traffic Management Microkernel (TMM) to terminate and potentially DoS the system. The issue is a data-plane vulnerability that disrupts traffic as TMM restarts; exploitation is remote a...

CVE-2023-29163 BIG-IP UDP Profile vulnerability

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

K20145107: BIG-IP UDP profile vulnerability CVE-2023-29163

Security Advisory Description When a UDP profile with Idle Timeout set to Immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2023-29163 Impact Traffic is disrupted while the TMM process restarts. This...

PT-2023-22180 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP affected versions not specified Description: The issue occurs when a UDP profile with an idle timeout set to immediate or the value 0 is configured on a virtual server. In this scenario, undisclosed traffic can cause the Traffic...