SUSE-SU-2020:3913-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

Security Advisory 0059

Security Advisory 0059 . CSAF PDF Date: December 16th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | December 16th, 2020 | Initial Release The CVE-ID tracking this issue is: CVE-2020-24360 CVSSv3.1 Base Score: 7.4/10 AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Description This advisory...

Huawei Data Communication: Configuring Rate Limiting for ARP Packets (Deprecated)

This VT has been deprecated and replaced by the following VT: - SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei Data Communication: Validity check of ARP packets

After the validity check of ARP packets is configured, the device checks the consistency between the source and destination MAC addresses in the Ethernet packet header and those in the Data field of the ARP packet. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

Design/Logic Flaw

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

CVE-2018-16600

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of ARP packets in eARPProcessPacket can be used for information disclosure...

arp-validator - Security Tool To Detect ARP Poisoning Attacks

Security Tool to detect arp poisoning attacks. Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores validated host...

CVE-2016-1419

Cisco Access Point devices with software 8.2102.43 allow remote attackers to cause a denial of service device reload via crafted ARP packets, aka Bug ID CSCuy55803...

Code injection

Cisco Access Point devices with software 8.2102.43 allow remote attackers to cause a denial of service device reload via crafted ARP packets, aka Bug ID CSCuy55803...

CVE-2016-1419

CVE-2016-1419 affects Cisco Aironet access points running 8.2(102.43). The issue stems from improper processing of ARP packets, allowing an unauthenticated adjacent attacker to send crafted ARP requests and cause a denial of service (device reload) on Cisco Aironet 1800/2800/3800 series platforms...

CVE-2016-1419

Cisco Access Point devices with software 8.2102.43 allow remote attackers to cause a denial of service device reload via crafted ARP packets, aka Bug ID CSCuy55803...

CVE-2015-8230

Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service memory consumption and restart via a large number of crafted ARP packets...

Memory corruption

Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service memory consumption and restart via a large number of crafted ARP packets...

CVE-2015-8230

Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service memory consumption and restart via a large number of crafted ARP packets...

CVE-2015-8230

CVE-2015-8230 affects Huawei eSpace 8950 IP phones (before V200R003C00SPC300). The issue is a memory leak caused by handling crafted ARP packets, leading to memory exhaustion and device restart (DoS). Public descriptions confirm the vulnerability exists in the eSpace 8950 line and that Huawei rel...

Security Advisory - DoS Vulnerability in Huawei eSpace 8950 IP Phone

When Huawei eSpace 8950 IP phone receive some type of malicious ARP packets, memory leak may occur on the network interface card. When the memory is overloaded by such packets, the IP phone restarts Vulnerability ID: HWPSIRT-2015-08041. This vulnerability has been assigned Common Vulnerabilities...

Cisco NX-OS on Nexus-OS Buffer Overflow Vulnerability

Cisco NX-OS is a data center-class operating system from Cisco that embodies modular design, perpetuity, and maintainability. Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.37.1 A buffer overflow vulnerability in MDS SAN-OS 7.1 allows remote attackers to cause a denial of service via a...