CVE-2021-34714

A vulnerability in the Unidirectional Link Detection UDLD feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due t...

CVE-2021-34770

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to execute arbitrary code with administrative privileges or cause a...

GHSA-59G9-7GFX-C72P Infinite loop in Tomcat due to parsing error

Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service...

The vulnerability of the Open vSwitch network service provided by Neutron, related to insufficient data authentication checks, allows attackers to access confidential data and cause service failures.

The vulnerability of the Open vSwitch network service provided by Neutron relates to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through specially crafted packets...

UBUNTU-CVE-2021-41079

Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service...

The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP implementations allows a attacker to cause service failures.

The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP protocols is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted IP packets...

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-37206

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Received webpackets are not properly processed. An unauthenticated remot...

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

Siemens SIPROTEC 5输入验证错误漏洞

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. Siemens SIPROTEC 5 suffers from an Input Authentication Error vulnerability that arises from incoming webpackets that are not handled correctly. An unauthenticated, remote attacker with access to any Ethernet interface could explo...

SUSE SLES15 Security Update : libtpms (SUSE-SU-2021:3004-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:3004-1 advisory. - CVE-2021-3746: Fixed out-of-bounds access via specially crafted TPM 2 command packets bsc1189935. Tenable has extracted the preceding description blo...

Design/Logic Flaw

The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMPhostconnectionreq packets, allowing attackers in radio range to trigger a denial of service deadlock of the device via crafted LMP packets. Manual user intervention i...

Cisco NX-OS Software VXLAN OAM DoS (cisco-sa-nxos-ngoam-dos-LTDb9Hv)

A denial of service DoS vulnerability exists in the VXLAN Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software, known as NGOAM, due to an improper handling of specific packets with a Transparent Interconnection of Lots of Links TRILL OAM EtherType. An unauthenticated,...

The vulnerability in the implementation of the TCP/IP protocol stack for Juniper Networks Junos OS allows a attacker to cause a service failure.

The vulnerability of the TCP/IP protocol stack implementation in Juniper Networks Junos OS lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted packets...

Cisco NX-OS Software Denial of Service Vulnerability (CNVD-2021-68721)

Cisco NX-OS Software is a set of data center-class operating system software for switches from Cisco, U.S. A denial-of-service vulnerability exists in the VXLAN OAM feature of Cisco NX-OS Software, which can be exploited by attackers by sending specially crafted packets to cause high device CPU...

Cisco NX-OS Software 输入验证错误漏洞

Cisco NX-OS Software is a set of data center-class operating system software for switches from Cisco, U.S. A denial-of-service vulnerability exists in the VXLAN OAM feature of Cisco NX-OS Software, which can be exploited by attackers by sending specially crafted packets to cause high device CPU...

CVE-2021-22328

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft the specific packet. Successful exploit may cause some services abnormal. Affected product versions include:CloudEngine 12800...

CVE-2021-0284

A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the device thereby causing a Denial of Service DoS. By repeatedly sending these sequences of packets to the device, an attacker can sustain the Denial of...

CVE-2021-37222

Parsers in the open source project RCDCAP before 1.0.5 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via specially crafted packets...

CVE-2021-37222

Parsers in the open source project RCDCAP before 1.0.5 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via specially crafted packets...