Lucene search
+L

1176 matches found

Cvelist
Cvelist
added 2024/01/12 12:51 a.m.47 views

CVE-2024-21587 Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled

An Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber management daemon bbe-smgd of Juniper Networks Junos OS on MX Series allows an attacker directly connected to the vulnerable system who repeatedly flaps DHCP subscriber sessions to cause a slow memory...

6.5CVSS6.7AI score0.00278EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/01/12 12:51 a.m.4 views

CVE-2024-21587 Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled

An Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber management daemon bbe-smgd of Juniper Networks Junos OS on MX Series allows an attacker directly connected to the vulnerable system who repeatedly flaps DHCP subscriber sessions to cause a slow memory...

6.5CVSS6.5AI score0.00278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/10 12:0 a.m.17 views

PT-2024-1135 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on MX Series versions prior to 20.4R3-S9 Juniper Networks Junos OS on MX Series version 21.2 versions prior to 21.2R3-S7 Juniper Networks Junos OS on MX Series version 21.3 versions prior to 21.3R3-S5 Juniper Network...

6.5CVSS6.4AI score0.00278EPSS
SaveExploits0References6
OSV
OSV
added 2024/01/10 12:0 a.m.39 views

ALSA-2024:0130 Moderate: frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fixes: ffr: Flowspec overflow in bgpd/bgpflowspec.c CVE-2023-38406 ffr: Out of bounds read in bgpd/bgplabel.c CVE-2023-38407 frr: cra...

9.8CVSS8.9AI score0.00939EPSS
SaveExploits0References10
AlmaLinux
AlmaLinux
added 2024/01/10 12:0 a.m.63 views

Moderate: frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fixes: ffr: Flowspec overflow in bgpd/bgpflowspec.c CVE-2023-38406 ffr: Out of bounds read in bgpd/bgplabel.c CVE-2023-38407 frr: cra...

9.8CVSS7.5AI score0.00939EPSS
SaveExploits0References10
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/03 9:31 p.m.29 views

Security Bulletin: A vulnerability in GNU Binutils may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service (CVE-2019-9074).

Summary GNU Binutils is used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP. CVE-2019-9074. Vulnerability Details CVEID:CVE-2019-9074 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an out-of-bounds read leading to a SEGV in bfdgetl32 in libbfd.c i...

5.5CVSS6.1AI score0.01556EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/12/27 12:0 a.m.32 views

NewStart CGSL MAIN 6.02 : binutils Multiple Vulnerabilities (NS-SA-2023-0104)

The remote NewStart CGSL host, running version MAIN 6.02, has binutils packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SE...

7.8CVSS7.1AI score0.01683EPSS
SaveExploits2References5
OpenVAS
OpenVAS
added 2023/11/16 12:0 a.m.26 views

Fedora: Security Advisory for frr (FEDORA-2023-ce436d56f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.3AI score0.02152EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2023/11/16 12:0 a.m.35 views

Fedora: Security Advisory for frr (FEDORA-2023-61abba57d8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.3AI score0.02152EPSS
SaveExploits3References2
Fedora
Fedora
added 2023/11/15 1:43 a.m.45 views

[SECURITY] Fedora 39 Update: frr-8.5.3-1.fc39

FRRouting is free software that manages TCP/IP based routing protocols. It ta kes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga...

9.1CVSS7.2AI score0.02152EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2023/11/15 12:0 a.m.30 views

Rockwell Automation Stratix Industrial Managed Ethernet Switch 7Pk Errors (CVE-2018-0155)

A vulnerability in the Bidirectional Forwarding Detection BFD offload implementation could allow an unauthenticated remote attacker to cause a crash of the iosd process, causing a DoS condition. The vulnerability is due to insufficient error handling when the BFD header in a BFD packet is...

8.6CVSS7.5AI score0.08195EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.12 views

The vulnerability of the _bfd_vms_slurp_eeom function in the libbfd.c component of the GNU Binutils development environment allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the bfdvmsslurpeeom function in the libbfd.c component of the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

10CVSS6.9AI score0.01493EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.8 views

The vulnerability of the _bfd_dwarf2_cleanupdebug_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the bfddwarf2cleanupdebuginfo function in the dwarf2.c component of the GNU Binutils development environment is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability allows an attacker who operates remotely to...

7.8CVSS6.8AI score0.01426EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.7 views

The vulnerability of the _bfd_vms_slurp_egsd function in the bfd/vms-alpha.c component of the GNU Binutils development environment allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the bfdvmsslurpegsd function in the bfd/vms-alpha.c component of the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity,...

10CVSS6.9AI score0.015EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.11 views

The vulnerability of the _bfd_elf_parse_attributes function in the elf-attrs.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdelfparseattributes function in the elf-attrs.c component of the GNU Binutils development environment is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created ELF file...

7.8CVSS6.5AI score0.03095EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.7 views

The vulnerability of the pex64_bfd_print_pdata_section function in the bfd/libbfd.c component, and the pex64_get_runtime_function function in the pei-x86_64.c component of the GNU Binutils development environment, allows a attacker to cause a service failure.

The vulnerability of the pex64bfdprintpdatasection function in the bfd/libbfd.c component, and the pex64getruntimefunction function in the pei-x8664.c component of the GNU Binutils development environment, relates to reading data from within acceptable buffer limits. Exploitation of this...

7.8CVSS7AI score0.01556EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.8 views

The vulnerability of the IS_CONTAINED_BY_LMA macro in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the ISCONTAINEDBYLMA macro in the bfd/elf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...

7.8CVSS6.6AI score0.01977EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.12 views

The vulnerability of the bfd_section_from_shdr function in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the bfdsectionfromshdr function in the bfd/elf.c component of the GNU Binutils development environment is related to insufficient input validation. Exploiting this vulnerability allows an attacker to cause service failures remotely...

7.8CVSS6.4AI score0.02025EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.11 views

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure through the use of a specially created file...

7.8CVSS6.4AI score0.01156EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.8 views

The vulnerability of the bfd_zalloc function in the opncls.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdzalloc function in the opncls.c component of the GNU Binutils development environment is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a...

7.8CVSS6.9AI score0.01284EPSS
SaveExploits1References9Affected Software4
Rows per page
Query Builder