Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from the receipt of an...

Security Bulletin: IBM Switches flood Fibre Channel-over-Ethernet (FCoE) data frame out of every port if destination address is not in MAC table (CVE-2013-0570)

Summary IBM System Networking switches that are capable of Fiber Channel over Ethernet FCoE will flood FCoE data frames with unknown MAC addresses to all ports on the switch. Remediation for this vulnerability consists of updating the IBM Networking OperatingSystem NOS running on these switches t...

Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects IBM BladeCenter Switches (CVE-2015-7575)

Summary The MD5 "SLOTH" vulnerability on TLS 1.2 affects IBM BladeCenter Switches. Vulnerability Details Summary The MD5 "SLOTH" vulnerability on TLS 1.2 affects IBM BladeCenter Switches. Vulnerability Details CVE-ID: CVE-2015-7575 Description: The TLS protocol could allow weaker than expected...

Security Bulletin: Vulnerability in OSPFv2 Routing Protocol used in IBM System Networking Ethernet Switches (CVE-2013-5385)

Summary Many IBM System Networking Ethernet switches use the OSPFv2 routing protocol, which has an ambiguity that can be exploited to allow network traffic to be black-holed and/or redirected. Remediation for this vulnerability consists of updating the IBM Networking Operating System NOS running ...

OESA-2023-1216 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A use-after-free flaw was found in btrfssearchslot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information leaCVE-2023-1611 A flaw use after free i...

Race condition

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in Ethernet communication by sending a large number of specially...

CVE-2023-1285

CVE-2023-1285 describes a signal handler race condition in Mitsubishi Electric India GC-ENET-COM (GOC35 series) where units with serial numbers starting with 16 are vulnerable. An unauthenticated remote attacker can cause a DoS in Ethernet communications by sending a flood of specially crafted UD...

Mitsubishi Electric GC-ENET-COM 竞争条件问题漏洞

The Mitsubishi Electric GC-ENET-COM is a graphical operations controller from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric GC-ENET-COM that stems from the presence of a competitive condition vulnerability that could allow a remote, unauthenticated attacker...

Driver Disk for Cisco enic 4.4.0.1-930.6 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Cisco's enic driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- enic| Ethernet/NIC| 4.4.0.1-930.6 Issues resolved in this driver disk...

Vulnerability of the MiniIGD service’s SOAP Gigabit Ethernet chips from Realtek RTL81xx, allowing attackers to execute arbitrary code

The vulnerability of the MiniIGD service’s Gigabit Ethernet chips from Realtek, the RTL81xx series, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially crafted requests like NewInternalClient...

PT-2023-3059 · Juniper Networks · Qfx10000 Series +2

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.4R3-S10 Juniper Networks Junos OS version 20.1R1 and later versions Juniper Networks Junos OS versions prior to 20.2R3-S6 Juniper Networks Junos OS versions prior to 20.3R3-S6 Juniper Networks...

USN-6007-1: Linux kernel (GCP) vulnerabilities

It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...

CVE-2023-28224

Windows Point-to-Point Protocol over Ethernet PPPoE Remote Code Execution Vulnerability...

Authorization Bypass

github.com/moby/moby is vulnerable to Authorization Bypass. Encrypted overlay networks accept cleartext VXLAN datagrams tagged with the VNI of the network, which allows remote attackers to arbitrary inject ethernet frames into the encrypted overlay network...

PT-2023-2404 · Microsoft · Windows Point-To-Point Protocol Over Ethernet +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol over Ethernet PPPoE affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource, specifically a "race condition" in the implementation of the...

Microsoft Windows Point-to-Point Protocol over Ethernet 安全漏洞

Microsoft Windows Point-to-Point Protocol over Ethernet is the PPPoE protocol used in Windows from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Point-to-Point Protocol over Ethernet PPPoE. The following products and versions are affected: Windows 10 Version 21H2...

Denial Of Service (DoS)

docker is vulnerable to Denial of Service DoS attacks. The injection of arbitrary ethernet frames allow remote attackers to enable denial of service attacks, such as establishing a UDP or TCP connection or smuggling packets into the overlay network...

CVE-2023-28840

A vulnerability was found in Moby due to an unprotected alternate channel within encrypted overlay networks. This issue could allow a malicious user to cause a denial of service by sending a specially crafted request to inject arbitrary Ethernet frames into the encrypted overlay network...

Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

GHSA-6WRF-MXFJ-PF5P Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...