frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

A vulnerability was found in FRRouting FRR. This flaw allows a remote attacker to cause a denial of service issue via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...

frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

A vulnerability was found in FRRouting FRR. This flaw allows a remote attacker to cause a denial of service issue via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...

CVE-2022-43906

IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 240897...

Information disclosure

IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 240897...

CVE-2022-43906 IBM Security Guardium information disclosure

IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 240897...

CVE-2022-43906

IBM Security Guardium 11.5 is affected by CVE-2022-43906 due to a missing or insecure SameSite attribute on a sensitive cookie, which could disclose sensitive information. The issue has been addressed by IBM; remediation involves updating to a patched release and applying the provided fix guidanc...

PT-2023-14390 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.5 Description: The issue could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. Recommendations: For IBM Security Guardium version 11.5, consider updating...

Eclipse Mosquitto Security Vulnerability

Eclipse Mosquitto is a suite of open source message broker software from the Eclipse Foundation. A security vulnerability exists in Mosquitto versions prior to 2.0.16 that stems from a memory leak that occurs when a client sends a v5 CONNECT packet with a probate message containing an invalid...

CBL Mariner 2.0 Security Update: frr (CVE-2023-38802)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38802 advisory. - FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service vi...

SUSE SLES15: libfpm_pb0 / libospf0 / libospfapiclient0 / libquagga_pb0 / etc (SUSE-SU-2023:3839-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3839-1 advisory. - CVE-2023-38802: Fixed bad length handling in BGP attribute handling bsc1213284. - CVE-2023-41358: Fixed possible...

SUSE-SU-2023:3839-1 Security update for quagga

This update for quagga fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling bsc1213284. - CVE-2023-41358: Fixed possible crash when processing NLRIs if the attribute length is zero bsc1214735...

SUSE-SU-2023:3836-1 Security update for quagga

This update for quagga fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling bsc1213284. - CVE-2023-41358: Fixed possible crash when processing NLRIs if the attribute length is zero bsc1214735...

SUSE-SU-2023:3793-1 Security update for quagga

This update for quagga fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling bsc1213284. - CVE-2023-41358: Fixed possible crash when processing NLRIs if the attribute length is zero bsc1214735...

SUSE-SU-2023:3762-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-38802: Fixed bad length handling when processing BGP attributes. bsc1213284 - CVE-2023-41358: Fixed a possible crash when processing NLRIs with an attribute length of zero. bsc1214735 - CVE-2023-41909: Fixed NULL pointer dereference due t...

Security Bulletin: IBM Security Guardium has a missing or insecure SameSite attribute for a sensitive cookie (CVE-2022-43906)

Summary IBM Security Guardium has addressed this vulnerability with an update. Vulnerability Details CVEID:CVE-2022-43906 DESCRIPTION: IBM Security Guardium could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. CVSS Base score: 3.1 CVSS...

Oracle Linux 8 : frr (ELSA-2023-5219)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5219 advisory. 7.5.1-7.0.1.2 - Fix BFD crash in FRR running in MetalLB BZ2231829 - Fix for CVE-2023-38802 Tenable has extracted the preceding description block directly from t...

frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

A vulnerability was found in FRRouting FRR. This flaw allows a remote attacker to cause a denial of service issue via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...

frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

A vulnerability was found in FRRouting FRR. This flaw allows a remote attacker to cause a denial of service issue via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...

frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

A vulnerability was found in FRRouting FRR. This flaw allows a remote attacker to cause a denial of service issue via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...

frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

A vulnerability was found in FRRouting FRR. This flaw allows a remote attacker to cause a denial of service issue via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...