Lucene search
+L

463 matches found

Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•2 views

PT-2022-31521

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. The actual impact and attack plausibility have not yet been proven. Recommendation...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•0 views

PT-2022-30852

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. This potential security issue was introduced in version v5.15 and is fixed in versi...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/08 12:00 a.m.•1 views

PT-2025-8274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the ip gre module, where the GRE protocol with TUNNEL CSUM applies local checksum offload on CHECKSUM PARTI...

7.1CVSS0.00281EPSS
SaveExploits0References28
Veracode
Veracode
•added 2022/01/26 5:22 a.m.•35 views

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists in grehandleoffloads of ipgre.c due to improper checks which allows an attacker to cause a buffer overflow that leads to an application crash...

5.5CVSS3.8AI score0.0018EPSS
SaveExploits0References3Affected Software2
attackerkb
attackerkb
•added 2022/01/14 8:15 p.m.•15 views

CVE-2021-39633

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS6.3AI score0.0018EPSS
SaveExploits0References2
OSV
OSV
•added 2022/01/14 8:15 p.m.•11 views

DEBIAN-CVE-2021-39633

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS5.7AI score0.0018EPSS
SaveExploits0References1
OSV
OSV
•added 2022/01/14 8:15 p.m.•13 views

UBUNTU-CVE-2021-39633

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.8CVSS5.9AI score0.0018EPSS
SaveExploits0References4
OSV
OSV
•added 2022/01/01 12:00 a.m.•40 views

ASB-A-150694665

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.0018EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2021/10/26 12:00 a.m.•14 views

October 26, 2021—KB5006745 (OS Build 20348.320) Preview

None None...

6.1AI score
SaveExploits0
Imperva Blog
Imperva Blog
•added 2021/10/11 6:08 p.m.•69 views

Learning how MTU and MSS work is key to using DDoS Protection as a Service

Maximum Transmit Unit MTU and Maximum Segment Size MSS are two important terms you should be familiar with when venturing into the world of networking, especially if you are working with GRE and IPSEC tunnels. And if you are looking to use DDoS Protection as a service, you will need to know how M...

0.2AI score
SaveExploits0
OSV
OSV
•added 2021/09/23 3:15 a.m.•17 views

CVE-2021-1611

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

8.6CVSS5.8AI score0.01328EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/23 3:15 a.m.•27 views

CVE-2021-1611

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

8.6CVSS0.01328EPSS
SaveExploits0References1
Prion
Prion
•added 2021/09/23 3:15 a.m.•30 views

Design/Logic Flaw

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

5CVSS8.3AI score0.01328EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/09/23 2:30 a.m.•100 views

CVE-2021-1611

The CVE-2021-1611 issue affects Cisco IOS XE Wireless Controller Software on Catalyst 9800 Family/Embedded Wireless Controllers and Embedded Wireless on Catalyst 9000 Series switches, relating to Ethernet over GRE (EoGRE) packet processing. The root cause is improper handling of malformed EoGRE p...

8.6CVSS8.5AI score0.01328EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/09/22 4:00 p.m.•19 views

CVE-2021-1611

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

8.6CVSS7.7AI score0.01328EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/22 12:00 a.m.•13 views

Cisco IOS和Cisco Catalyst 资源管理错误漏洞

Cisco IOS and Cisco Catalyst are both products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco Catalyst is a series of switches. A resource management error vulnerability exists in a number of Cisco products and is caused by mishandling of malformed...

8.6CVSS8AI score0.01328EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/09/22 12:00 a.m.•1 views

PT-2021-5174

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Wireless Controller Software versions affected versions not specified Description A vulnerability in Ethernet over GRE EoGRE packet processing could allow an unauthenticated, remote attacker to cause a denial of service DoS...

8.6CVSS0.01328EPSS
SaveExploits0References7
ThreatPost
ThreatPost
•added 2021/02/16 9:27 p.m.•72 views

DDoS Attacks Wane in Q4 Amid Cryptomining Resurgence

Distributed denial-of-service DDoS attacks dropped significantly at the end of 2020, down 31 percent in the fourth quarter, according to researchers. The reason? Cybercriminals have switched their efforts and their botnets to cryptomining. According to an analysis from Kaspersky published Tuesday...

6.8AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2020/07/24 12:00 a.m.•49 views

Juniper Junos MX Series PFE Small Packet DoS (JSA11036)

According to its self-reported version, the remote Juniper Junos OS device is affected by a denial of service DoS vulnerability. When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E...

7.5CVSS7.4AI score0.01075EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/07/24 12:00 a.m.•38 views

Juniper Junos MX Series PFE Large Packet DoS (JSA11041)

According to its self-reported version, the remote Juniper Junos OS device is affected by a denial of service DoS vulnerability. When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E...

5.3CVSS5.8AI score0.01037EPSS
SaveExploits0References2
Rows per page
Query Builder