Lucene search
+L

3581 matches found

CNVD
CNVD
added 2021/01/21 12:0 a.m.7 views

Cisco StarOS Denial of Service Vulnerability (CNVD-2021-09312)

Cisco StarOS is a router operating system that controls the entire system logic and can control processes and CLIs. A denial of service vulnerability exists in IPv4 protocol processing in Cisco StarOS versions prior to 21.22.0. The vulnerability stems from a memory leak during packet processing. ...

8.6CVSS6.5AI score0.01284EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/20 8:15 p.m.5 views

CVE-2021-1353

A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory leak that occurs during packet processing. An attacker could exploit this...

8.6CVSS7.3AI score0.01284EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/20 8:15 p.m.21 views

CVE-2021-1353

A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory leak that occurs during packet processing. An attacker could exploit this...

8.6CVSS6.4AI score0.01284EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/20 8:0 p.m.69 views

CVE-2021-1353

Cisco StarOS IPv4 DoS (CVE-2021-1353): memory leak in IPv4 packet processing allows unauthenticated remote attackers to exhaust memory and trigger npusim restarts, causing DoS. Affected: Cisco StarOS. Exploit involves sending crafted IPv4 packets. Remediation: Cisco has released software updates;...

8.6CVSS6.9AI score0.01284EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/20 8:0 p.m.24 views

CVE-2021-1353 Cisco StarOS IPv4 Denial of Service Vulnerability

A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory leak that occurs during packet processing. An attacker could exploit this...

5.8CVSS8.6AI score0.01284EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/01/20 8:0 p.m.16 views

CVE-2021-1353 Cisco StarOS IPv4 Denial of Service Vulnerability

A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory leak that occurs during packet processing. An attacker could exploit this...

5.8CVSS7AI score0.01284EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/01/20 4:0 p.m.48 views

Cisco StarOS IPv4 Denial of Service Vulnerability

A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory leak that occurs during packet processing. An attacker could exploit this...

5.8CVSS2.2AI score0.01284EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/15 6:15 p.m.9 views

CVE-2021-0207

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being...

7.5CVSS5.8AI score0.01261EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/15 6:15 p.m.26 views

CVE-2021-0207

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being...

7.5CVSS7.6AI score0.01261EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/15 6:15 p.m.23 views

Input validation

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being...

5CVSS7.6AI score0.01261EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/01/15 6:15 p.m.30 views

Design/Logic Flaw

A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the device by sending certain crafted protocol packets from an adjacent device with invalid payloads to the device. These crafted packets, which should be discarded, are instead replicated and sent...

6.1CVSS7.3AI score0.00639EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/01/15 5:36 p.m.100 views

CVE-2021-0222

CVE-2021-0222 is a Denial of Service (DoS) vulnerability in Juniper Networks Junos OS. The issue arises when an adjacent device sends crafted IPv4/IPv6 protocol packets with invalid payloads; these packets are (incorrectly) replicated and sent toward the Routing Engine, leading to an extended DoS...

7.4CVSS7.4AI score0.00639EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/15 5:36 p.m.27 views

CVE-2021-0222 Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.

A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the device by sending certain crafted protocol packets from an adjacent device with invalid payloads to the device. These crafted packets, which should be discarded, are instead replicated and sent...

7.4CVSS7.6AI score0.00639EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/01/15 5:35 p.m.30 views

CVE-2021-0207 NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being...

7.5CVSS7.8AI score0.01261EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/12/24 9:46 p.m.38 views

Integer Overflow

open-iscsi:sid is vulnerable to integer overflow. The vulnerability exist in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

7.5CVSS5.1AI score0.03912EPSS
SaveExploits0References3Affected Software3
zdt
zdt
added 2020/12/18 12:0 a.m.59 views

FRITZ!Box 7.20 - DNS Rebinding Protection Bypass Vulnerability

Exploit Title: FRITZ!Box 7.20 - DNS Rebinding Protection Bypass Date: 2020-06-23 Exploit Author: RedTeam Pentesting GmbH Vendor Homepage: https://en.avm.de/ Version: 7.20 CVE: 2020-26887 Advisory: FRITZ!Box DNS Rebinding Protection Bypass RedTeam Pentesting discovered a vulnerability in FRITZ!Box...

7.8CVSS0.1AI score0.01419EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2020/12/14 12:0 a.m.66 views

openSUSE Security Update : nsd (openSUSE-2020-2222)

This update for nsd fixes the following issues : nsd was updated to the new upstream release 4.3.4 FEATURES : - Merge PR 141: ZONEMD RR type. BUG FIXES : - Fix that symlink does not interfere with chown of pidfile boo1179191, CVE-2020-28935 - Fix 128: Fix that the invalid port number is logged fo...

9.8CVSS7.4AI score0.02026EPSS
SaveExploits1References5
OSV
OSV
added 2020/12/11 10:15 p.m.2 views

DEBIAN-CVE-2020-13987

An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upperlayerchksum in net/ipv4/uip.c...

7.5CVSS6.7AI score0.0322EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/11 10:15 p.m.26 views

CVE-2020-13988

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

7.5CVSS7.6AI score0.03912EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/11 10:15 p.m.17 views

CVE-2020-13988

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

7.5CVSS9AI score
SaveExploits0References2
Rows per page
Query Builder