CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

DEBIAN-CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

Code injection

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

CVE-2018-12066 affects the BIRD Internet Routing Daemon prior to 1.6.4. An attacker with local access can trigger a denial of service (stack consumption and daemon crash) via crafted BGP mask expressions in birdc. Multiple connected sources confirm the fix is in Bird 1.6.4; Fedora advisories and ...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

Quagga aspath_put BGP Session Drop Denial of Service (CVE-2017-16227)

A denial-of-service vulnerability exists in Quagga. The vulnerability is due to an improper calculation of ASPATH. A remote attacker can exploit this vulnerability by sending a specially crafted request to the affected service. Successful exploitation would cause the target to crash, resulting in...

Beers with Talos EP 28 - APT, BGP, RCEs, and an Old RAT

Beers with Talos BWT Podcast Episode 28 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcast EP28 Show Notes: Recorded April 27 - We have a special guest intro this week, since Mitch came down wit...

Juniper Junos Routing Process Daemon (RPD) BGP UPDATE Packet Handling Unspecified Remote DoS (JSA10848)

According to its self-reported version number, the remote Junos device is affected by a remote denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109214; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2018-5254

Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service Rib agent restart via a malformed path attribute in an UPDATE message...

CVE-2018-5254

Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service Rib agent restart via a malformed path attribute in an UPDATE message...

Design/Logic Flaw

Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service Rib agent restart via a malformed path attribute in an UPDATE message...

CVE-2018-5254

Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service Rib agent restart via a malformed path attribute in an UPDATE message...

CVE-2018-5254

CVE-2018-5254 affects Arista EOS before 4.20.2F, where a malicious BGP peer can cause a DoS by sending an UPDATE with a malformed path attribute, triggering a Rib agent restart. The connected advisory and Nessus note that a fix is available in EOS 4.20.2F and later, or via the provided hotfix/pat...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the following Juniper Security Advisories...

CVE-2018-0020

Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon rpd crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to oth...

Design/Logic Flaw

Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon rpd crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to oth...

CVE-2018-0020

CVE-2018-0020 affects Junos OS where receipt of a malformed BGP UPDATE can cause the routing process daemon (rpd) to crash and restart. Repeated malformed updates may lead to an extended denial-of-service on the device, though the malformed update does not propagate to other BGP peers. Affected J...

CVE-2018-0020 Junos OS: rpd daemon cores due to malformed BGP UPDATE packet

Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon rpd crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to oth...