Juniper Junos OS Vulnerability (JSA70211)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70211 advisory. - An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS...

Juniper Junos OS Vulnerability (JSA70208)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70208 advisory. - An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-bas...

PT-2023-3069 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.4R3-S10 Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S6 Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S6 Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S5 Juniper...

Null pointer dereference

An Access of Uninitialized Pointer vulnerability in SIP Application Layer Gateway ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When specific valid SIP packets are received the PFE will crash and...

CVE-2022-20837

A vulnerability in the DNS application layer gateway ALG functionality that is used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a logic error that occurs when an...

CVE-2022-20837

CVE-2022-20837 is Cisco IOS XE Software DNS NAT ALG DoS vulnerability. A logic error in the DNS ALG handling when inspecting certain TCP DNS packets can cause an affected device to reload, leading to DoS. Exploitation requires IPv4 TCP DNS traffic through a device performing NAT for DNS; IPv6 is ...

Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway DoS (cisco-sa-alg-dos-KU9Z8kFX)

A vulnerability in the DNS application layer gateway ALG functionality that is used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a logic error that occurs when an...

CVE-2022-27255

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

CVE-2022-27255

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

Stack overflow

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

CVE-2022-27255

CVE-2022-27255 affects Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1. The SIP ALG component that rewrites SDP data has a stack-based buffer overflow, enabling an attacker to remotely execute code without authentication by sending a crafted SIP packet containing malicious SDP data. The NVD metrics ra...

CVE-2022-27255

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

Juniper Junos OS DoS (JSA69708)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69708 advisory. - An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos O...

Input validation

An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause a partial Denial of Service DoS. On all MX and SRX platforms, if the...

CVE-2022-22204 Junos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP traffic

An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause a partial Denial of Service DoS. On all MX and SRX platforms, if the...

CVE-2022-22204

CVE-2022-22204 affects Juniper Networks Junos OS on MX and SRX platforms when the SIP ALG is enabled. A memory release bug (improper release of memory before removing last reference) can cause a stale SIP entry to be created by certain SIP packets, and sustained traffic can exhaust the SIP call t...

Exploit for Improper Input Validation in Realtek Ecos_Rsdk_Firmware

CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow Th...

CVE-2022-26370

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x versions prior to 14.1.4.6, when a Session Initiation Protocol SIP message routing framework MRF application layer gateway ALG profile is configured on a Message Routing virtual server, undisclosed request...

Code injection

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG profile is configured on a virtual server, undisclosed responses can cause Traffic Management MicrokernelTMM to terminate. Note: Software versions which have...

CVE-2022-29473

CVE-2022-29473 affects F5 BIG-IP IPSec ALG on virtual servers, causing TMM termination (DoS). Affected: BIG-IP 15.1.x before 15.1.5.1; 14.1.x before 14.1.4.6; 13.1.x before 13.1.5. Remediation per K06323049: apply fixes in 16.1.0 (for 16.x), 15.1.5.1 (for 15.x), 14.1.4.5 (for 14.x), or 13.1.5 (fo...