CVE-2020-3449 Cisco IOS XR Software Additional Paths Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP additional paths feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent authorized users from monitoring the BGP status and cause the BGP process to stop processing new updates, resulting in a denial of servic...

CVE-2020-3449

CVE-2020-3449 affects Cisco IOS XR Software BGP Additional Paths. The issue is a logic error in lexicographical order calculation when displaying additional path information, which can cause an infinite loop and a DoS condition. An unauthenticated, remote attacker can exploit it by sending a craf...

Cisco IOS XR BGP Additional Paths DoS (cisco-sa-bgp-ErKEqAer)

According to its self-reported version, Cisco IOS XR Software is affected by a denial of service DoS vulnerability in its Border Gateway Protocol BGP feature due to an incorrect calculation of lexicographical order when displaying additional path information. An unauthenticated, remote attacker c...

[SECURITY] Fedora 32 Update: rpki-client-6.7p1-1.fc32

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

Fedora: Security Advisory for rpki-client (FEDORA-2020-25d8011cb4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: rpki-client-6.7p1-1.fc31

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

Fedora: Security Advisory for rpki-client (FEDORA-2020-9f31ce1df2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgpattrprint because of unlimited recursion...

Buffer Overflows

The BGP parser in tcpdump has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP...

Buffer Over-reads

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpattrprint MPREACHNLRI...

Denial Of Service (DoS)

The BGP parser in tcpdump is vulnerable to denial of service DoS.A buffer over-read in 'print-bgp.c:bgpcapabilitiesprint' allows an attacker to crash the application...

Cisco IOS XR Software Additional Paths Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP additional paths feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent authorized users from monitoring the BGP status and cause the BGP process to stop processing new updates, resulting in a denial of servic...

Junos OS: RPD crash when processing a specific BGP packet (JSA11035)

The version of Junos OS installed on the remote host is affected by a denial of service DoS vulnerability. Processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt o...

CVE-2020-1646

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon RPD crash and restart. This issue occurs only when the device is receiving and processing the BGP UPDATE for an EBGP peer. This issue does not occur when t...

CVE-2020-1648

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

CVE-2020-1648

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

CVE-2020-1640

An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD routing protocols process daemon allows an attacker to crash RPD thereby causing a Denial of Service DoS condition. This framework requires these packets to be passed. By continuousl...

CVE-2020-1644

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

Input validation

An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD routing protocols process daemon allows an attacker to crash RPD thereby causing a Denial of Service DoS condition. This framework requires these packets to be passed. By continuousl...

Design/Logic Flaw

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...