Lucene search
+L

2482 matches found

BDU FSTEC
BDU FSTEC
added 2020/11/05 12:00 a.m.11 views

The vulnerability of the bgp_capabilities_print() function in the packet capture and analysis tool tcpdump allows a hacker to induce a service failure.

The vulnerability of the bgpcapabilitiesprint function print-bgp.c in the network traffic capture and analysis tool tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.5AI score0.03985EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:00 a.m.10 views

The vulnerability of the bgp_capabilities_print() function in the packet capture and analysis tool tcpdump allows a hacker to cause a service failure.

The vulnerability of the bgpcapabilitiesprint function print-bgp.c in the network traffic capture and analysis tool tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.5AI score0.04763EPSS
SaveExploits0References15Affected Software6
RedHat Linux
RedHat Linux
added 2020/11/04 1:47 a.m.14 views

tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c

An out-of-bounds read vulnerability was discovered in tcpdump while printing BGP packets captured in a pcap file or coming from the network. A remote attacker may abuse this flaw by sending specially crafted packets that, when printed, would trigger the flaw and crash the application...

9.8CVSS6.4AI score0.04763EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2020/10/26 12:00 a.m.36 views

Junos OS Multiple vulnerabilities (JSA11075)

According to its self-reported version number, the remote Juniper Junos device is affected by a memory leak within the EVPN protocol. It, Therefore, could allow for a adjacent unauthenticated attacker to crash the EVPN protocol with specifically crafted BGP packets. Note that Nessus has not teste...

6.5CVSS6.6AI score0.00413EPSS
SaveExploits0References2
OSV
OSV
added 2020/10/16 9:15 p.m.10 views

CVE-2020-1678

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

6.5CVSS6.6AI score0.00413EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/16 9:15 p.m.22 views

CVE-2020-1678

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

6.5CVSS0.00413EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/16 9:15 p.m.27 views

CVE-2020-1662

On Juniper Networks Junos OS and Junos OS Evolved devices, BGP session flapping can lead to a routing process daemon RPD crash and restart, limiting the attack surface to configured BGP peers. This issue only affects devices with BGP damping in combination with accepted-prefix-limit configuration...

7.5CVSS0.01288EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/16 9:15 p.m.29 views

Design/Logic Flaw

On Juniper Networks Junos OS and Junos OS Evolved devices, BGP session flapping can lead to a routing process daemon RPD crash and restart, limiting the attack surface to configured BGP peers. This issue only affects devices with BGP damping in combination with accepted-prefix-limit configuration...

4.3CVSS7.6AI score0.01288EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/10/16 9:15 p.m.25 views

Design/Logic Flaw

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

2.9CVSS6.5AI score0.00413EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/10/16 8:31 p.m.30 views

CVE-2020-1678 Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

6.5CVSS6.5AI score0.00413EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/16 8:31 p.m.61 views

CVE-2020-1662

CVE-2020-1662 describes a vulnerability in Juniper Networks Junos OS and Junos OS Evolved where BGP session flapping can cause the routing process daemon (RPD) to crash and restart when BGP damping is used with an accepted-prefix-limit configuration. Affected versions span multiple 17.x to 20.x r...

7.5CVSS7.6AI score0.01288EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/10/16 8:31 p.m.39 views

CVE-2020-1662 Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.

On Juniper Networks Junos OS and Junos OS Evolved devices, BGP session flapping can lead to a routing process daemon RPD crash and restart, limiting the attack surface to configured BGP peers. This issue only affects devices with BGP damping in combination with accepted-prefix-limit configuration...

7.5CVSS7.7AI score0.01288EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/10/07 12:00 a.m.62 views

Cisco IOS Software MP BGP EVPN DoS (cisco-sa-ios-bgp-evpn-dos-LNfYJxfF)

According to its self-reported version, IOS is affected by a denial of service DoS vulnerability in the Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family. An unauthenticated, remote attacker can exploit this, by sending BGP update messages wit...

7.8CVSS7.5AI score0.01097EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/10/07 12:00 a.m.79 views

Cisco IOS XE Software MP BGP EVPN DoS (cisco-sa-ios-bgp-evpn-dos-LNfYJxfF)

According to its self-reported version, IOS-XE is affected by a denial of service DoS vulnerability in the Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family. An unauthenticated, remote attacker can exploit this, by sending BGP update messages...

7.8CVSS7.6AI score0.01097EPSS
SaveExploits0References2
NVD
NVD
added 2020/09/24 6:15 p.m.22 views

CVE-2020-3479

A vulnerability in the implementation of Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The...

7.8CVSS0.01097EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/24 6:15 p.m.28 views

Race condition

A vulnerability in the implementation of Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The...

7.8CVSS7.5AI score0.01097EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/09/24 5:52 p.m.29 views

CVE-2020-3479 Cisco IOS and IOS XE Software MP-BGP EVPN Denial of Service Vulnerability

A vulnerability in the implementation of Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The...

6.1CVSS7.6AI score0.01097EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/09/24 5:52 p.m.11 views

CVE-2020-3479 Cisco IOS and IOS XE Software MP-BGP EVPN Denial of Service Vulnerability

A vulnerability in the implementation of Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The...

6.1CVSS7.1AI score0.01097EPSS
SaveExploits0References1
CVE
CVE
added 2020/09/24 5:52 p.m.85 views

CVE-2020-3479

CVE-2020-3479 affects Cisco IOS and IOS XE MP-BGP EVPN. Root cause: incorrect processing of BGP update messages containing crafted EVPN attributes, leading to a DoS via device crash. Impact: unauthenticated remote DoS condition. Exploitation: possible by sending specific malformed BGP updates to ...

7.8CVSS6.8AI score0.01097EPSS
SaveExploits0References1Affected Software2
Cisco
Cisco
added 2020/09/24 4:00 p.m.49 views

Cisco IOS and IOS XE Software MP-BGP EVPN Denial of Service Vulnerability

A vulnerability in the implementation of Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The...

6.1CVSS1.9AI score0.01097EPSS
SaveExploits0References1
Rows per page
Query Builder