Lucene search
+L

1628 matches found

VulnCheck KEV
VulnCheck KEV
added 2022/03/25 12:00 a.m.9 views

VulnCheck KEV: CVE-2010-3035

Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service DoS...

7.5CVSS5.8AI score0.05562EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:00 a.m.63 views

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service DoS...

7.5CVSS6.5AI score0.05562EPSS
SaveIn wildExploits0
VulnCheck KEV
VulnCheck KEV
added 2022/03/25 12:00 a.m.6 views

VulnCheck KEV: CVE-2009-2055

Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service DoS...

5.9CVSS5.8AI score0.03326EPSS
SaveExploits1References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:00 a.m.51 views

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service DoS...

5.9CVSS6.6AI score0.03326EPSS
SaveIn wildExploits1
Veracode
Veracode
added 2022/03/12 10:47 a.m.25 views

Out-of-Bounds Read

pjproject is vulnerable to out of bounds read. The vulnerability exists in pjmediartcpxrrxrtcpxr of rtcpxr.c due to a lack of validation of received packet size which allows an attacker to send a RTCP XR message with an invalid packet size...

9.1CVSS2.6AI score0.03722EPSS
SaveExploits1References9Affected Software3
VulnCheck KEV
VulnCheck KEV
added 2022/03/03 12:00 a.m.9 views

VulnCheck KEV: CVE-2018-0175

Format string vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition or execute arbitrary code with elevated...

8CVSS7.5AI score0.03501EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/27 6:15 p.m.16 views

CVE-2021-43845

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

9.1CVSS0.03722EPSS
SaveExploits1References9
OSV
OSV
added 2021/12/27 6:15 p.m.27 views

CVE-2021-43845

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

9.1CVSS3.4AI score
SaveExploits0References9
Prion
Prion
added 2021/12/27 6:15 p.m.26 views

Design/Logic Flaw

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

6.4CVSS9.1AI score0.03722EPSS
SaveExploits1References8Affected Software2
UbuntuCve
UbuntuCve
added 2021/12/27 6:15 p.m.30 views

CVE-2021-43845

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

9.1CVSS7.2AI score0.03722EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/12/27 12:00 a.m.40 views

CVE-2021-43845 Prevent out-of-bounds read in PJSIP

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

8.2CVSS9.5AI score0.03722EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
added 2021/12/27 12:00 a.m.98 views

CVE-2021-43845

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

9.1CVSS9AI score0.03722EPSS
SaveExploits1
CVE
CVE
added 2021/12/27 12:00 a.m.126 views

CVE-2021-43845

CVE-2021-43845 affects the PJPROJECT/JAMI stack used by PJMEDIA. In version 2.11.1 and earlier, processing of incoming RTCP XR messages with a block may not validate the data field against the packet size, potentially enabling out-of-bounds reads. Debian/DSA/DLA entries note fixes in ring (embedd...

9.1CVSS8.8AI score0.03722EPSS
SaveExploits1References9Affected Software1
Positive Technologies
Positive Technologies
added 2021/12/27 12:00 a.m.6 views

PT-2021-23975 · Pjsip +3 · Pjsip +3

Name of the Vulnerable Software and Affected Versions: PJSIP versions 2.11.1 and prior Description: The issue affects PJSIP, a free and open source multimedia communication library. In the affected versions, if an incoming RTCP XR message contains a block, the data field is not checked against th...

9.8CVSS8.2AI score0.16406EPSS
SaveExploits2References109
Debian CVE
Debian CVE
added 2021/12/27 12:00 a.m.53 views

CVE-2021-43845

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

9.1CVSS8.4AI score0.03722EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.53 views

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

Cisco IOS XR Distance Vector Multicast Routing Protocol DVMRP incorrectly handles Internet Group Management Protocol IGMP packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash...

8.6CVSS7.3AI score0.03702EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.36 views

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

Cisco IOS XR Distance Vector Multicast Routing Protocol DVMRP incorrectly handles Internet Group Management Protocol IGMP packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash...

8.6CVSS7.3AI score0.0332EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.33 views

Cisco IOS XR Software Discovery Protocol Format String Vulnerability

Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device...

8.8CVSS8.5AI score0.11685EPSS
SaveIn wildExploits0
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.12 views

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR arises from insufficient input data validation. This allows attackers to trigger service interruptions.

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.4CVSS7.1AI score0.00389EPSS
SaveExploits0References2Affected Software2
NCSC
NCSC
added 2021/10/21 12:00 a.m.43 views

Vulnerability fixed in Cisco IOS XR

A vulnerability has been found in Cisco IOS XR. The vulnerability is located specifically in the DHCP functionality. It allows an unauthenticated remote malicious person able to stop the DHCP daemon process. While this process is running it is temporarily not possible to obtain a new DHCP lease...

7.8CVSS6.8AI score0.00796EPSS
SaveExploits0
Rows per page
Query Builder