Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability

A vulnerability in the Data Management Engine DME of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input...

The vulnerability of Coriant SURPASS HiT network equipment, related to errors in processing input data, allows a intruder to trigger a service failure.

The vulnerability of Coriant SURPASS HiT network equipment is related to errors in processing input data by the Ethernet interface. Exploiting this vulnerability can allow a malicious actor to trigger service failures by sending broadcast packets...

The vulnerability of the Cisco IOS operating system, related to resource release errors, allows a intruder to trigger a service failure.

The vulnerability of the Cisco IOS operating system is related to resource release errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending broadcast packets...

slp-validate Input Validation Error Vulnerability

slp-validate is a lightweight SLP Simple Ledger Protocol validator with features such as pre-broadcast validation and burn protection. An input validation error vulnerability exists in slp-validate. The vulnerability stems from a network system or product that does not properly validate incoming...

openSUSE Security Update : ntp (openSUSE-2020-1007)

This update for ntp fixes the following issues : ntp was updated to 4.2.8p15 - CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service bsc1169740. - CVE-2018-8956: Fixed an issue which could have...

Security update for ntp (moderate)

openSUSE Security Update: Security update for ntp Announcement ID: openSUSE-SU-2020:1007-1 Rating: moderate References: 1125401 1169740 1171355 1172651 1173334 992038 Cross-References: CVE-2018-8956 CVE-2020-11868 CVE-2020-13817 CVE-2020-15025 Affected Products: openSUSE Leap 15.2 An update that...

Security update for ntp (moderate)

openSUSE Security Update: Security update for ntp Announcement ID: openSUSE-SU-2020:0934-1 Rating: moderate References: 1125401 1169740 1171355 1172651 1173334 992038 Cross-References: CVE-2018-8956 CVE-2020-11868 CVE-2020-13817 CVE-2020-15025 Affected Products: openSUSE Leap 15.1 An update that...

EulerOS Virtualization 3.0.6.0 : ntp (EulerOS-SA-2020-1723)

According to the versions of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The monlist feature in ntprequest.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service traffic...

The vulnerability of the 802.1X standard implementation in Cisco IOS operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the 802.1X standard implementation in Cisco IOS exists due to errors in handling broadcast traffic. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches 802.1X Authentication Bypass Vulnerability (cisco-sa-c2960L-DpWA9Re4)

An authentication bypass vulnerability exists in Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches due to broadcast traffic that is received on the 802.1X-enabled port being mishandled. An unauthenticated, remote attacker can exploit this by sending broadcast...

CVE-2020-14457

An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the updateteam WebSocket event, aka MMSA-2020-0012...

Cisco Catalyst 2960-L Series Switches and CDB-8P Switches Access Control Error Vulnerability

The Cisco Catalyst 2960-L Series Switches and the Cisco Catalyst CDB-8P Switches are both products of Cisco, Inc.The Cisco Catalyst 2960-L Series Switches is a 2960-L series switch. Cisco Catalyst CDB-8P Switches is a digital building series switch. An access control error vulnerability exists in...

CVE-2020-3231

A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward broadcast traffic before being authenticated on the port. The vulnerability exists because broadcast traffic that is...

CVE-2020-3231

A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward broadcast traffic before being authenticated on the port. The vulnerability exists because broadcast traffic that is...

Authentication flaw

A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward broadcast traffic before being authenticated on the port. The vulnerability exists because broadcast traffic that is...

CVE-2020-3231

CVE-2020-3231 affects Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches. The issue is an 802.1X authentication bypass caused by mishandling of broadcast traffic on 802.1X-enabled ports, allowing an unauthenticated, adjacent attacker to forward broadcast traffic b...

Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches 802.1X Authentication Bypass Vulnerability

A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward broadcast traffic before being authenticated on the port. The vulnerability exists because broadcast traffic that is...

EulerOS 2.0 SP5 : ntp (EulerOS-SA-2020-1611)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast...

Network Time Protocol Input Validation Error Vulnerability

Network Time Protocol NTP, Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in ntpd in NTP. A remote attacker could use this vulnerability to prevent a broadcast client from synchronizing its clock wit...

CVE-2018-8956

ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that...