Lucene search
+L

3582 matches found

Prion
Prion
added 2021/07/15 8:15 p.m.23 views

Design/Logic Flaw

A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved EVO allows an attacker to send specially crafted packets to the device, causing the Advanced Forwarding Toolkit manager evo-aftmand-bt or evo-aftmand-zx process to crash and restart, impacting all traff...

7.8CVSS7.5AI score0.01056EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/07/15 8:15 p.m.20 views

Design/Logic Flaw

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet forwarding loop, leading to a partial Denial of Service DoS. The issue is caused by DVMRP packets looping on a multi-homed...

2.9CVSS6AI score0.01097EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/15 8:01 p.m.42 views

CVE-2021-0295 Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet forwarding loop, leading to a partial Denial of Service DoS. The issue is caused by DVMRP packets looping on a multi-homed...

6.1CVSS6.2AI score0.01097EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/15 8:00 p.m.34 views

CVE-2021-0280 Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine

Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise PE chipset-based line cards, ddos-protection configuration changes made from the CLI will not take effect as expected beyond the default DDoS Distributed Denial of Service...

7.5CVSS7.6AI score0.00961EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/14 4:00 p.m.8 views

CVE-2021-0295

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet forwarding loop, leading to a partial Denial of Service DoS. The issue is caused by DVMRP packets looping on a multi-homed...

6.1CVSS6.3AI score0.01097EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/14 4:00 p.m.6 views

CVE-2021-0288

A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs Modular Port Concentrators may cause FPC to crash and lead to a Denial of Service DoS condition. Continued receipt of this packet will sustain the...

6.5CVSS6.5AI score0.00381EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2021/07/13 8:34 a.m.39 views

Denial Of Service (DoS)

sshd-core is vulnerable to denial of service. SFTP and port forwarding feature of the library allows an attacker to send maximum data to cause the boundary overflow on BufferedIoOutputStream writing, causing an OutOfMemory error...

6.5CVSS4AI score0.03394EPSS
SaveExploits0References9Affected Software22
Positive Technologies
Positive Technologies
added 2021/07/13 12:00 a.m.8 views

PT-2021-3894

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to an information disclosure vulnerability in Microsoft Exchange Server, associated with weaknesses in the authentication procedure. This vulnerability...

7.8CVSS8.8AI score0.98176EPSS
SaveExploits2References26
Positive Technologies
Positive Technologies
added 2021/07/13 12:00 a.m.12 views

PT-2021-13654 · Qualcomm · Snapdragon Connectivity +1

Name of the Vulnerable Software and Affected Versions: Snapdragon Compute, Snapdragon Connectivity affected versions not specified Description: A weak configuration in WLAN could cause the forwarding of unencrypted packets from one client to another. Recommendations: At the moment, there is no...

4.3CVSS4.6AI score0.00172EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2021/07/12 6:31 p.m.81 views

CVE-2021-30129

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...

6.5CVSS5.1AI score0.03394EPSS
SaveExploits0References3
NVD
NVD
added 2021/07/12 12:15 p.m.27 views

CVE-2021-30129

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...

6.5CVSS0.03394EPSS
SaveExploits0References5
OSV
OSV
added 2021/07/12 12:15 p.m.28 views

CVE-2021-30129

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...

6.5CVSS6.8AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/07/12 12:15 p.m.6 views

CVE-2021-30129

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...

6.5CVSS6.7AI score0.03394EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2021/07/12 12:10 p.m.334 views

CVE-2021-30129

CVE-2021-30129 affects Apache Mina SSHD's sshd-core; a crafted request can trigger an OutOfMemory DoS in the SFTP and port forwarding features. Remediation: upgrade to Apache Mina SSHD 2.7.0 (fix documented in the IBM PEM advisory referencing this CVE). If applying via IBM PEM, follow their patch...

6.5CVSS6.9AI score0.03394EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2021/07/12 12:10 p.m.62 views

CVE-2021-30129

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...

6.5CVSS6.7AI score0.03394EPSS
SaveExploits0
OSV
OSV
added 2021/07/09 11:15 a.m.3 views

DEBIAN-CVE-2021-3570

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

8.8CVSS8.1AI score0.02955EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/09 11:15 a.m.4 views

CVE-2021-3570

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

8.8CVSS6AI score0.02955EPSS
SaveExploits0References8
Veracode
Veracode
added 2021/07/07 11:23 a.m.29 views

Denial Of Service

linuxptp is vulnerable to denial of service. The vulnerability exists due to a missing length check when forwarding a PTP message between ports...

8.8CVSS8.2AI score0.02955EPSS
SaveExploits0References9Affected Software1
RedHat Linux
RedHat Linux
added 2021/07/06 3:25 p.m.14 views

linuxptp: missing length check of forwarded messages

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

8.8CVSS6.1AI score0.02955EPSS
SaveExploits0References4
OSV
OSV
added 2021/07/05 12:00 a.m.11 views

UBUNTU-CVE-2021-3570

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

8.8CVSS7.5AI score0.02955EPSS
SaveExploits0References4
Rows per page
Query Builder