319 matches found
SUSE CVE-2017-13025
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
UBUNTU-CVE-2022-3567
A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6streamops/inet6dgramops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the...
H3C Magic NX18 Plus 缓冲区错误漏洞
The H3C Magic NX18 Plus is a Gigabit dual-band router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic NX18 Plus NX18PV100R003 version, which stems from a stack overflow in the EnableIpv6 method...
GHSA-RWQR-C348-M5WR Withdrawn: Denial of Service in aiohttp
Withdrawn This advisory has been withdrawn because the maintainers of aiohttp and multiple third parties disputed the validity of the issue. There is not sufficient evidence for the claims in the original report. Original Description aiohttp v3.8.1 was discovered to contain an invalid IPv6 URL...
CVE-2022-30033
Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...
The vulnerability of Juniper Networks Junos OS routers in the QFX5000 and EX4600 series, related to a memory release error, allows a hacker to trigger a service failure.
The vulnerability of Juniper Networks Junos OS routers in the QFX5000 and EX4600 series is related to a memory release error during the processing of incoming IPv6 packets. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Contiki-NG 安全漏洞
Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. An infinite loop vulnerability exists in the handling of IPv6 Neighbor Request NS messages in Contiki-NG versions prior to 4.6. An attacker could exploit this vulnerability to cause a denial of service...
QEMU 缓冲区错误漏洞
QEMU is a suite of analog processor software. A security vulnerability exists in QEMU that stems from the function udp6input using memory outside of the working mbuf buffer when processing udp packets from incoming guests that are smaller than the size of the udphdr structure. An attacker could...
CVE-2021-0250
In segment routing traffic engineering SRTE environments where the BGP Monitoring Protocol BMP feature is enable, a vulnerability in the Routing Protocol Daemon RPD process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to cor...
Juniper Networks Junos OS MX Denial of Service Vulnerability
Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A memory disclosure vulnerability exists in Juniper Networks Junos OS MX Handling NAT64 IPv6, which can be exploited by a remote attacker to submit a special request, which can be used in ...
DEBIAN-CVE-2020-1749
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...
PT-2020-12547 · Weave · Weave Net
Name of the Vulnerable Software and Affected Versions: Weave Net versions prior to 2.6.3 Description: An attacker able to run a process as root in a container can respond to DNS requests from the host and insert themselves as a fake service. In a cluster with an IPv4 internal network, if IPv6 is...
Vulnerability fixed in Linux kernel
SUSE has fixed a vulnerability in SUSE Kernel. The vulnerability causes in certain cases IPv6 traffic to be is not encrypted over an IPsec tunnel. A malicious party could potentially be able to retrieve sensitive data as a result. -= SUSE =- SUSE has made updates available to fix the vulnerabilit...
The vulnerability of the Routing Engine module of the JunOS operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Routing Engine module of the JunOS operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability allows a malicious actor to cause service failures through specially created IPv6 traffic...
CVE-2019-17273
E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in IPv6 environments...
Juniper Networks Junos OS IPv6 Message Handling Denial of Service Vulnerability
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that arises from the program's failure to properly handle...
USN-4157-2 linux-hwe, linux-azure, linux-gcp, linux-gke-5.0 vulnerabilities
USN-4157-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.04. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 19.04 for Ubuntu 18.04 LTS. Wen Huang discovered that the Marvell Wi-Fi device driver in the Linux kernel did not properly...
The vulnerability of the syntax analysis function of the PowerDNS server allows a attacker to cause a service failure.
The vulnerability of the DNS server’s syntax analysis function in PowerDNS is related to the lack of an authentication mechanism. Exploiting this vulnerability could allow a malicious actor to cause a service failure when searching for NS/A/AAAA records on the server...
UBUNTU-CVE-2019-13952
The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...
CVE-2019-1804
A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of...