Lucene search
K

1086 matches found

CNNVD
CNNVD
added 2026/05/26 12:0 a.m.7 views

FastNetMon 安全漏洞

FastNetMon is a high-performance DDoS detector/sensor developed by Pavel Odintsov, based on multiple packet capture engines. Versions of FastNetMon prior to 1.2.9 contain a security vulnerability caused by the uint8t type being used for the length field in the BGP ASPATH attribute encoding, which...

9.8CVSS6.1AI score0.00312EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.6 views

FastNetMon 安全漏洞

FastNetMon is a high-performance DDoS detector/sensor developed by Pavel Odintsov. It is built using multiple packet capture engines. Versions of FastNetMon Community Edition 1.2.9 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the lack of prefix bit length...

9.8CVSS6.1AI score0.00572EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/26 12:0 a.m.10 views

EUVD-2026-31842

FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI Network Layer Reachability Information decoder. The function decodebgpsubnetencodingipv4raw in src/bgpprotocol.cpp reads prefixbitlength directly from the BGP packet line 99 without validating it is ...

9.8CVSS6.4AI score0.00572EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/26 12:0 a.m.8 views

CVE-2026-48686

FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI Network Layer Reachability Information decoder. The function decodebgpsubnetencodingipv4raw in src/bgpprotocol.cpp reads prefixbitlength directly from the BGP packet line 99 without validating it is ...

6.4AI score0.00572EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/26 12:0 a.m.5 views

CVE-2026-48691

FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP ASPATH attribute encoder. In src/bgpprotocol.hpp, the IPv4UnicastAnnounce::getattributes function computes attributelength as 'sizeofbgpaspathsegmentelementt + this-aspathasns.size sizeofuint32t' and stores it in a...

6.2AI score0.00312EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.10 views

PT-2026-43273

Name of the Vulnerable Software and Affected Versions FastNetMon Community Edition versions prior to 1.2.10 Description A stack-based buffer overflow exists in the BGP NLRI Network Layer Reachability Information decoder. The function decode bgp subnet encoding ipv4 raw in src/bgp protocol.cpp rea...

9.8CVSS6.5AI score0.0141EPSS
Exploits1References22
Cvelist
Cvelist
added 2026/05/26 12:0 a.m.32 views

CVE-2026-48686

FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI Network Layer Reachability Information decoder. The function decodebgpsubnetencodingipv4raw in src/bgpprotocol.cpp reads prefixbitlength directly from the BGP packet line 99 without validating it is ...

0.00572EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/26 12:0 a.m.35 views

CVE-2026-48689

FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamicbinarybuffert class src/dynamicbinarybuffer.hpp. Five methods appenddynamicbuffer, appenddataaspointer, appenddataasobjectptr, memcpyfromptr, memcpyfromobjectptr use an incorrect bounds chec...

0.00685EPSS
Exploits1References3
CVE
CVE
added 2026/05/26 12:0 a.m.9 views

CVE-2026-48691

FastNetMon Community Edition through 1.2.9 has an integer overflow in the BGP AS_PATH encoder (src/bgp_protocol.hpp, IPv4UnicastAnnounce::get_attributes). attribute_length and path_segment_length are stored in uint8_t, so AS_PATHs >63 ASNs truncate to 0–255 for sizing but the full data is writ...

9.8CVSS6.2AI score0.00312EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/05/26 12:0 a.m.10 views

CVE-2026-48688

FastNetMon Community Edition up to 1.2.9 contains multiple out-of-bounds reads in the BGP MP_REACH_NLRI IPv6 attribute decoder (decode_mp_reach_ipv6 in src/bgp_protocol.cpp). The description notes a TODO to add sanity checks to avoid reads after the attribute memory block, and that the function c...

7.5CVSS5.9AI score0.00282EPSS
Exploits0References3Affected Software1
CloudLinux
CloudLinux
added 2026/05/21 10:39 a.m.6 views

quagga: Fix of CVE-2018-5380

CVE-2018-5380: fix BGP NOTIFY debug-print msg array over-read...

4.3CVSS6.8AI score0.14998EPSS
Exploits0
NVD
NVD
added 2026/05/20 5:16 p.m.10 views

CVE-2026-20171

A vulnerability in the Border Gateway Protocol BGP enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to trigger BGP peer flaps, resulting in a denial of service DoS condition...

6.8CVSS0.00466EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/20 4:6 p.m.9 views

EUVD-2026-31135

A vulnerability in the Border Gateway Protocol BGP enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to trigger BGP peer flaps, resulting in a denial of service DoS condition...

6.8CVSS5.8AI score0.00466EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/20 4:6 p.m.5 views

CVE-2026-20171

A vulnerability in the Border Gateway Protocol BGP enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to trigger BGP peer flaps, resulting in a denial of service DoS condition...

6.8CVSS5.8AI score0.00466EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/20 4:6 p.m.8 views

CVE-2026-20171 Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to trigger BGP peer flaps, resulting in a denial of service DoS condition...

6.8CVSS5.8AI score0.00466EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/20 4:6 p.m.33 views

CVE-2026-20171 Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to trigger BGP peer flaps, resulting in a denial of service DoS condition...

6.8CVSS0.00466EPSS
Exploits0References1
CVE
CVE
added 2026/05/20 4:6 p.m.77 views

CVE-2026-20171

CVE-2026-20171 affects Cisco Nexus 3000 and Nexus 9000 Series switches in standalone NX-OS mode. The vulnerability lies in the BGP enforce-first-as feature, due to incorrect parsing of a transitive BGP attribute. An unauthenticated, remote attacker could send a crafted BGP update to trigger BGP p...

6.8CVSS5.8AI score0.00466EPSS
Exploits0References1
Cisco
Cisco
added 2026/05/20 4:0 p.m.7 views

Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to trigger BGP peer flaps, resulting in a denial of service DoS condition...

6.8CVSS5.8AI score0.00466EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: mm/shmem, swap: Fixed a race condition between the truncate operation and the swap entry splitting operation. The helper function for shmem swap does not handle the order of swap entries correctly. It uses xacmpxchgirq to eras...

7.3CVSS5.3AI score0.00089EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в aom

Integer overflows in the libaom internal function imgallochelper can lead to heap buffer overflows. This function can be accessed through three callers: Calling aomimgalloc with a large value of the dw, dh, or align parameter may result in integer overflows during the calculations of buffer sizes...

10CVSS7.2AI score0.01254EPSS
Exploits1References2
Rows per page
Query Builder