CVE-2014-3293

Cisco IOS 15.4(3)S0b on ASR901 devices is vulnerable to a denial of service caused by misrouting IPv4 packet processing to the CPU, enabling remote attackers to trigger BGP neighbor flapping by sending crafted IPv4 packets. The issue stems from punting crafted IPv4 packets to the CPU for processi...

Cisco ASR901 Crafted IPv4 Packet Denial of Service Vulnerability

A vulnerability in Internet Protocol version 4 IPv4 packet processing of the Cisco ASR901 could allow an unauthenticated, remote attacker to flood packets to the ASR901 CPU. The vulnerability is due to punting crafted IPv4 packets to the CPU for processing. An attacker could exploit this...

CVE-2014-3818

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4,...

Memory corruption

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4,...

CVE-2014-3818

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4,...

CVE-2014-3818

CVE-2014-3818 affects Juniper Junos OS versions listed in the description; the flaw is in handling BGP UPDATE messages with 4-byte AS numbers, leading to memory corruption and a DoS in the rpd process (causing a crash/restart). Connected sources confirm a BGP UPDATE DoS condition and provide the ...

Juniper Junos BGP UPDATE 'rpd' Remote DoS (JSA10653)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of BGP UPDATE messages using 4-byte AS numbers. A remote attacker can exploit this issue, by sending a specially crafted BGP UPDATE packet, to...

Hacker Hijacks ISP Networks to steal $83,000 from Bitcoin Mining pools

Till now, he have heard about “Bitcoin digital wallet hacked” or “Bitcoin website hacked”, but now a hacker has stolen cryptocurrency from mining pools and generated $83,000 in digital cash in more than four months by gaining access to a Canadian Internet provider. Bitcoin is a virtual currency...

Multiple Vendor TCP Sequence Number Approximation Vulnerability (3)

No description provided by source. source: http://www.securityfocus.com/bid/10183/info A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to...

Cisco IOS <= 12.3 Show IP BGP Regexp Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25352/info Cisco IOS is prone to a remote denial-of-service vulnerability because the software fails to properly handle certain CLI commands. To issue commands that trigger this vulnerability, attackers must be able to...

Multiple Vendor TCP Sequence Number Approximation Vulnerability (4)

No description provided by source. source: http://www.securityfocus.com/bid/10183/info A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to...

Multiple Vendor TCP Sequence Number Approximation Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/10183/info A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to...

Multiple Vendor TCP Sequence Number Approximation Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/10183/info A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to...

Juniper Networks Junos OS RDP Crash Vulnerability

RDP crash when receiving BGP UPDATE with malformed inetflow prefix. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos...

Internet Bug Bounty: Multiple issues in looking-glass software (aka from web to BGP injections)

During the month of May 2014 we performed an offensive security analysis, trying to find how hard would it be for a low-to-medium skilled attacker to disrupt the core of the Internet ie. achieve the largest possible impact at the lowest common layer, with minimal resource. This is a confidential...

openSUSE Security Update : quagga (openSUSE-SU-2010:0984-1)

This update of quagga fixes two security issues : - CVE-2010-2948: CVSS v2 Base Score: 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P Stack-based buffer overflow while processing malformed Route-Refresh messages. - CVE-2010-2949: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P Denial of service...

openSUSE Security Update : quagga (openSUSE-SU-2011:1155-1)

This update fixes the following security issues : - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet CVE-2011-3325 ...

openSUSE Security Update : quagga (openSUSE-SU-2011:0274-2)

This security update of quagga fixes : - CVE-2010-1674: Direct BGP peers can send malformed extended communities which lead to a NULL pointer dereference. - CVE-2010-1675: A malformed ASPATHLIMIT path attribute will cause a session reset in Quagga. This malformed package is forwarded by other...

CVE-2012-5039

The BGP Router process in Cisco IOS before 12.250SY1 allows remote attackers to cause a denial of service memory consumption via vectors involving BGP path attributes, aka Bug ID CSCsw63003...

Design/Logic Flaw

The BGP Router process in Cisco IOS before 12.250SY1 allows remote attackers to cause a denial of service memory consumption via vectors involving BGP path attributes, aka Bug ID CSCsw63003...