CVE-2019-0008

CVE-2019-0008 describes a stack-based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) on QFX5000-series, EX4300, and EX4600 devices. A sequence of valid BGP or IPv6 BFD packets may crash the fxpc daemon or potentially enable remote code execution. Affected Junos OS release...

Siemens RuggedCom Server < v2.13.0 Multiple Vulnerabilities

Binary data 700524.prm...

ICSA-19-099-05 Siemens RUGGEDCOM ROX II

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: RUGGEDCOM ROX II Vulnerabilities: Double Free, Out-of-bounds Read, Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

openSUSE Security Update : wireshark (openSUSE-2019-557)

This update for wireshark fixes the following issues : Security issues fixed : - CVE-2018-14342: BGP dissector large loop wnpa-sec-2018-34, boo1101777 - CVE-2018-14344: ISMP dissector crash wnpa-sec-2018-35, boo1101788 - CVE-2018-14340: Multiple dissectors could crash wnpa-sec-2018-36, boo1101804...

Quagga BGP Daemon Notify Attribute Out of Bounds Read (CVE-2018-5378)

An out of bounds read vulnerability exists in BGP Daemon of Quagga. The vulnerability is due to improper validation of attribute sizes received by BGP peers before responding with the contents of the attribute in a NOTIFY message. A remote attacker can exploit this vulnerability by sending a...

Quagga BGP Daemon bgp_update_receive Double Free (CVE-2018-5379)

A double free vulnerability has been reported in Quagga BGP Daemon. The vulnerability is due to improper handling of cluster list and unknown attributes. A remote attacker can exploit this vulnerability by sending a crafted BGP UPDATE message to the target server...

Quagga BGP Daemon bgp_capability_msg_parse Denial-of-Service (CVE-2018-5381)

A denial-of-service vulnerability has been reported in the BGP Daemon of Quagga. The vulnerability is due to improper handling of Multiprotocol Extensions Capabilities within certain BGP messages. A remote attacker could exploit this vulnerability by sending a crafted BGP message to the target...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10902)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion...

Wireshark 2.6.x < 2.6.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.2 advisory. - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This...

CVE-2019-0012

A Denial of Service DoS vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended...

Design/Logic Flaw

A Denial of Service DoS vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended...

Authentication flaw

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon rpd process to crash with a core file being generated. Affected...

CVE-2019-0003

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon rpd process to crash with a core file being generated. Affected...

CVE-2019-0012 Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message

A Denial of Service DoS vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended...

CVE-2019-0012

CVE-2019-0012 describes a DoS in Juniper Junos OS for VPLS PE: processing a crafted BGP message crashes the rpd daemon, potentially causing extended DoS due to repeated restarts. Affected are PE routers with BGP Auto discovery for LDP VPLS. Vulnerable releases include multiple Junos OS versions l...

CVE-2019-0003 Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon rpd process to crash with a core file being generated. Affected...

CVE-2019-0003

CVE-2019-0003 describes a vulnerability in Juniper Junos OS where a flowspec BGP update containing a specific term-order can trigger a reachable assertion failure, crashing the routing protocol daemon (rpd) and producing a core. The issue affects Junos OS releases across SRX, EX, and QFX platform...

Denial Of Service (DoS)

Quagga is vulnerable to denial of service. A NULL pointer dereference in the the extended-community parser in bgpd allows remote attackers to crash the application via a malicious malformed Extended Communities attribute in a BGP message...

Junos OS: pd crash on VPLS PE upon receipt of specific BGP message (JSA10912)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability which allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeate...

Design/Logic Flaw

bgpd in FRRouting FRR aka Free Range Routing 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 not affecting Cumulus Linux or VyOS, when ENABLEBGPVNC is used for Virtual Network Control, allows remote attackers to cause a denial of service peering session flap via...