SUSE CVE-2022-23094

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6...

SUSE CVE-2023-30570

pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28...

Huawei EulerOS: Security Advisory for dbus (EulerOS-SA-2023-3069)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the SSH daemon on the RouterOS operating system, specifically the hAP lite router, allows a hacker to cause a service failure.

The vulnerability of the SSH daemon in the RouterOS operating system, specifically the hAP lite router, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

AZL-34802 CVE-2023-46813 affecting package hyperv-daemons for versions less than 6.6.29.1-1

An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory and th...

[SECURITY] Fedora 37 Update: xen-4.16.5-3.fc37

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Juniper Junos OS Vulnerability (JSA73170)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73170 advisory. - An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon rpd Juniper Networks Junos OS and Junos OS Evolved allows an...

Juniper Junos OS Vulnerability (JSA73146)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73146 advisory. - An Improper Input Validation vulnerability in the routing protocol daemon rpd of Juniper Networks allows an attacker to cause a Denial of Service DoS to the device upon...

[SECURITY] Fedora 38 Update: xen-4.17.2-4.fc38

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

The vulnerability of the `mm_answer_pam_free_ctx` function in the OpenSSH cryptographic protection mechanism allows a attacker to execute arbitrary code or halt the sshd service.

The vulnerability of the mmanswerpamfreectx function in the OpenSSH cryptographic security tool is related to privilege management errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code or halt the sshd service...

K000137315: ZebOS BGP vulnerability CVE-2023-45886

Security Advisory Description The BGP daemon bgpd in ZebOS through 7.10.6 allows remote attackers to cause a denial-of-service DoS by sending crafted BGP update messages containing a malformed attribute. CVE-2023-45886 Impact This vulnerability may allow a remote unauthenticated attacker to cause...

The vulnerability of the Demon Routing Protocol Daemon (rpd) in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon rpd in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Junos Kernel Debugging Streaming Daemon (jkdsd) in Juniper Networks’ Junos operating systems allows a hacker to cause a service failure.

The vulnerability of the Junos Kernel Debugging Streaming Daemon jkdsd in Juniper Networks’ Junos operating systems is related to synchronization errors when using shared resources for processing telemetry data. Exploiting this vulnerability can allow a malicious actor to trigger service failures...

The vulnerability of the Routing Protocol Demon (rpd) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Routing Protocol Demon rpd in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using a specially crafted ISO VPN BG...

The vulnerability of the Management Daemon (MGD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to induce a service failure.

The vulnerability of the Management Daemon MGD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by executing a specifi...

The vulnerability of the httpd next_page function in the microprogramming software of industrial Wi-Fi routers Yifan YF325 allows a hacker to execute arbitrary commands.

The vulnerability of the httpd nextpage function in the microprogramming-based industrial Wi-Fi routers Yifan YF325 relates to reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

USN-6416-3 linux-raspi vulnerabilities

It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service excessive CPU consumption. CVE-2023-1206 Daniel Trujillo, Johannes Wikner, and Kaveh Razavi...

Medium: libreswan

Issue Overview: A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer...

GHSA-V9JH-J8PX-98VQ go-ethereum vulnerable to denial of service via crafted GraphQL query

Geth aka go-ethereum through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service memory consumption and daemon hang via a crafted GraphQL query. NOTE: the vendor's position is that the "graphql endpoint is not designed to withstand attacks by hostile client...

go-ethereum vulnerable to denial of service via crafted GraphQL query

Geth aka go-ethereum through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service memory consumption and daemon hang via a crafted GraphQL query. NOTE: the vendor's position is that the "graphql endpoint is not designed to withstand attacks by hostile client...