954 matches found
CVE-2024-5872 On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc.
On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc...
CVE-2024-5872
CVE-2024-5872 affects Arista EOS where a specially crafted packet with an incorrect VLAN tag can be copied to the CPU, potentially causing incorrect control plane behavior (e.g., route flaps, learned multicast routes). The issue is rooted in how VLAN-tagged packets may be misrouted to the CPU und...
SUSE CVE-2024-56513
Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the karmadactl register command have excessive privileges to access control plane resources...
PT-2025-3678
Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description The issue is related to a specially crafted packet with an incorrect VLAN tag that may be copied to the CPU, potentially causing incorrect control plane behavior. This behavior can include...
Arista EOS 安全漏洞
Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista USA. A security vulnerability exists in Arista EOS that stems from the fact that specially crafted packets with incorrect VLAN tags may be copied to the CPU, which may result in incorrect control...
CVE-2024-5872: Undefined Security Weakness
On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc...
CVE-2024-56513
Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the karmadactl register command have excessive privileges to access control plane resources...
Karmada PULL Mode Cluster Privilege Escalation
Impact What kind of vulnerability is it? Who is impacted? The PULL mode clusters registered with the karmadactl register command have excessive privileges to access control plane resources. By abusing these permissions, an attacker able to authenticate as the karmada-agent to a karmada cluster...
CVE-2024-56513
Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the "karmadactl register" command have excessive privileges to access control plane resource...
CVE-2024-56513 Karmada PULL Mode Cluster Privilege Escalation
Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the karmadactl register command have excessive privileges to access control plane resources...
CVE-2024-56513
Karmada PULL mode clusters were granted excessive access to control plane resources before v1.12.0. An attacker who can authenticate as the karmada-agent could obtain administrative privileges over the entire federation, including all member clusters. Since v1.12.0, karmadactl register tightens p...
CVE-2024-56513: Incorrect Privilege Assignment
Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the karmadactl register command have excessive privileges to access control plane resources...
CVE-2024-55582
Oxide before 6 has unencrypted Control Plane datastores...
CVE-2024-55582
Oxide before 6 has unencrypted Control Plane datastores...
CVE-2024-55582
CVE-2024-55582 affects Oxide prior to version 6, where the control plane datastores are unencrypted. Root cause: storage of control plane data without encryption. Impact (per sources): potential exposure or modification of sensitive control-plane information, reflected in the CVSS vector (high co...
PT-2024-36560
Name of the Vulnerable Software and Affected Versions Oxide versions prior to 6 Description The issue concerns unencrypted Control Plane datastores in Oxide. This means that data stored in the Control Plane is not encrypted, potentially exposing it to unauthorized access. There is no information...
Oxide 安全漏洞
Oxide is a cloud platform from Oxide, Inc. A security vulnerability exists in versions prior to Oxide 6 that stems from having unencrypted control plane data storage...
CVE-2024-55582: Cleartext Storage of Sensitive Information
Oxide before 6 has unencrypted Control Plane datastores...