Lucene search
K

41 matches found

Snyk
Snyk
added 2026/05/04 6:24 a.m.0 views

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow in the DecodeFromBytes function of the AIGP Attribute Parser. An attacker can execute arbitrary code, cause a denial of service, or compromise data integrity and confidentiality by sending specially crafted BGP packets t...

7.5CVSS6AI score0.0007EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-6339

Malware in sbrugna...

7.8CVSS6AI score0.02907EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-12540

Malware in sbrugna...

6.5CVSS6.5AI score0.00081EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-12506

Malware in sbrugna...

7.5CVSS7.5AI score0.00448EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-2564

Malicious code in bioql PyPI...

8.2CVSS6.6AI score0.00744EPSS
Exploits0References2
OSV
OSV
added 2025/04/21 1:15 a.m.1 views

DEBIAN-CVE-2025-43971

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...

7.5CVSS4.3AI score0.00024EPSS
Exploits0References1
NVD
NVD
added 2025/01/09 7:15 p.m.4 views

CVE-2025-21598

An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon rpd allows an unauthenticated, network-based attacker to send malformed BGP packets to a device configured with packet receive trace options enabled to crash rpd. This issue affects:...

8.2CVSS0.00744EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/09 6:16 p.m.4 views

CVE-2025-21598 Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash

An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon rpd allows an unauthenticated, network-based attacker to send malformed BGP packets to a device configured with packet receive trace options enabled to crash rpd. This issue affects:...

8.2CVSS7.4AI score0.00744EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/09 4:49 p.m.6 views

CVE-2025-21600 Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

An Out-of-Bounds Read vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logically adjacent BGP peer sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of Service DoS...

7.1CVSS6.7AI score0.00071EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/11/25 12:0 a.m.2 views

Juniper Junos OS Vulnerability (JSA88099)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88099 advisory. - An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an...

8.7CVSS6AI score0.00281EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/09 12:0 a.m.1 views

Juniper Networks Junos OS和Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

8.7CVSS6.7AI score0.00381EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/06/25 12:0 a.m.1 views

PT-2024-7397

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.4R3-S8 Junos OS versions 22.2 prior to 22.2R3-S5 Junos OS versions 22.3 prior to 22.3R3-S4 Junos OS versions 22.4 prior to 22.4R3-S3 Junos OS versions 23.2 prior to 23.2R2-S2 Junos OS versions 23.4 prior to 23.4R...

8.7CVSS5.9AI score0.00289EPSS
Exploits0References12
Cvelist
Cvelist
added 2023/04/17 12:0 a.m.18 views

CVE-2023-28967 Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash

A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol BGP software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to send specific genuine BGP packets to a device configured with BGP to cause a Denial of Service DoS by...

7.5CVSS7.6AI score0.00538EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/10/18 12:0 a.m.29 views

Ubuntu 22.04 LTS : FRR vulnerabilities (USN-5685-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5685-1 advisory. It was discovered that FRR incorrectly handled parsing certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash,...

9.1CVSS8.3AI score0.02649EPSS
Exploits2References3
Veracode
Veracode
added 2022/10/12 10:37 a.m.26 views

Use-After-Free

frr is vulnerable to use-after-free. The vulnerability exists in multiple functions of bgppacket.c due to a race condition. which could allow an attacker to execute arbitrary codes and access the sensitive information by sending malicious BGP packets...

8.1CVSS8AI score0.02649EPSS
Exploits1References4Affected Software2
RedhatCVE
RedhatCVE
added 2022/08/16 9:38 a.m.97 views

CVE-2022-37035

A flaw was found in bgpd in FRRouting FRR. There is a possible use-after-free issue due to a race condition in bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c. This issue can lead to remote code execution or information disclosure by sending crafted BGP packets...

8.1CVSS2.2AI score0.02649EPSS
Exploits1References3
OSV
OSV
added 2022/08/02 11:15 p.m.16 views

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

8.1CVSS7.2AI score
Exploits0References4
NVD
NVD
added 2022/08/02 11:15 p.m.15 views

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

8.1CVSS0.02649EPSS
Exploits1References4
Prion
Prion
added 2022/08/02 11:15 p.m.15 views

Race condition

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

5.1CVSS7.9AI score0.02649EPSS
Exploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/08/02 11:15 p.m.51 views

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

8.1CVSS7.2AI score0.02649EPSS
Exploits1References4
Rows per page
Query Builder