SUSE SLES12 Security Update : xen (SUSE-SU-2020:3913-1)

This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3914-1)

This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SUSE-SU-2020:3914-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SUSE-SU-2020:3913-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SUSE-SU-2020:14578-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

Security Advisory 0059

Security Advisory 0059 . CSAF PDF Date: December 16th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | December 16th, 2020 | Initial Release The CVE-ID tracking this issue is: CVE-2020-24360 CVSSv3.1 Base Score: 7.4/10 AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Description This advisory...

CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

Input validation

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

CVE-2020-5665

Summary: CVE-2020-5665 affects Mitsubishi Electric MELSEC iQ-F Series FX5U(C) CPU modules with firmware version 1.060 or earlier. The vulnerability arises from an improper check/handling of exceptional conditions (CWE-703), which could allow an attacker to cause a denial-of-service on program exe...

Fedora 33 : libslirp (2020-77f93f41be)

Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 32 : libslirp (2020-331e1318dd)

Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2020-29130

An out-of-bounds access issue was found in the SLiRP user networking implementation of QEMU. It could occur while processing ARP/NCSI packets, if the packet length was shorter than required to accommodate respective protocol headers and payload. A privileged guest user may use this flaw to...

edk2: memory leak in ArpOnFrameRcvdDpc

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...

Cisco IOS XE Software for ASR 1000 Series 20 Gbps Embedded Services Processor IP ARP DoS (cisco-sa-esp20-arp-dos-GvHVggqJ)

According to its self-reported version and configuration, the Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor ESP running on the remote device is affected by a denial of service vulnerability. An unauthenticated, adjacent...

CVE-2020-3508

A vulnerability in the IP Address Resolution Protocol ARP feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor ESP installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload,...

CVE-2020-3508 Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability

A vulnerability in the IP Address Resolution Protocol ARP feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor ESP installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload,...

CVE-2020-3508 Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability

A vulnerability in the IP Address Resolution Protocol ARP feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor ESP installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload,...

CVE-2020-3508

CVE-2020-3508 affects Cisco IOS XE on ASR 1000 Series with a 20-Gbps ESP. An unauthenticated, adjacent attacker can send crafted IP ARP messages to exhaust resources and cause a reload (DoS) due to insufficient error handling at platform limits. Affected device: ASR 1000 with ESP; vulnerability l...