CVE-2018-0049

CVE-2018-0049 (Juniper Junos OS) involves a NULL pointer dereference in the Junos OS kernel that can crash the device, causing a sustained Denial of Service when a crafted MPLS packet is received on an interface configured for MPLS. The vulnerability affects multiple Junos OS releases across plat...

CVE-2018-0058 MX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of Service

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of Broadband Edge BBE client route processing on MX Series subscriber management platforms, introduced by the Tomcat Next...

CVE-2018-0058

CVE-2018-0058 affects Juniper Networks Junos OS on MX Series, caused by handling of BroadBand Edge (BBE) client routes introduced with Tomcat (Next Generation Subscriber Management). Receipt of a specially crafted IPv6 exception packet can trigger a kernel crash (vmcore), leading to device reboot...

CVE-2018-0049: NULL Pointer Dereference

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to crash. Continued receipt of this specifically crafted malicious MPLS packet will cause a sustained Denial of Service condition. This issue require it to be received on an...

PT-2018-8590

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1 through 15.1R7-S1 Junos OS versions 15.1R8 on MX Series Junos OS versions 16.1 through 16.1R4-S10 Junos OS versions 16.1R7 through 16.1R7-S1 Junos OS versions 16.1R8 on MX Series Junos OS versions 16.2 through 16.2R2...

CVE-2018-0058: Improper Input Validation

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of Broadband Edge BBE client route processing on MX Series subscriber management platforms, introduced by the Tomcat Next...

FreeBSD Null Pointer Reference Vulnerability

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project, headed by the Core Team team, and is an important branch of Unix-like systems that have evolved through BSD, 386BSD, and 4.4BSD. FreeBSD suffers from a null pointer reference vulnerability, which can be exploited by a...

CVE-2018-6925

In FreeBSD before 11.2-STABLEr338986, 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLEr338985, and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereferen...

CVE-2018-6925

In FreeBSD before 11.2-STABLEr338986, 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLEr338985, and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereferen...

CVE-2018-6925

In FreeBSD before 11.2-STABLE (r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE (r338985), and 10.4-RELEASE-p13, an unprivileged authenticated local user could trigger a NULL pointer dereference in the IPv6 protocol control block due to improper maintenance of IPv6 flags across failure pa...

CVE-2018-6925

In FreeBSD before 11.2-STABLEr338986, 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLEr338985, and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereferen...

CVE-2018-6925

In FreeBSD before 11.2-STABLEr338986, 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLEr338985, and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereferen...

PT-2018-3726

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.2-STABLEr338986 FreeBSD versions prior to 11.2-RELEASE-p4 FreeBSD versions prior to 11.1-RELEASE-p15 FreeBSD versions prior to 10.4-STABLEr338985 FreeBSD versions prior to 10.4-RELEASE-p13 Description The issue is...

CVE-2018-6925: NULL Pointer Dereference

In FreeBSD before 11.2-STABLEr338986, 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLEr338985, and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereferen...

EulerOS Virtualization 2.5.0 : kernel (EulerOS-SA-2018-1260)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel's client-side implementation of the cifs protocol. This flaw allows an attacker controlling...

Kernel update: Virtuozzo ReadyKernel patch 61.0 for Virtuozzo 7.0.4 to 7.0.7 HF3

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo 7.0.4 to 7.0.7 HF3. Vulnerability id: PSBM-88561 It was found that the implementation of ploop did not handle errors reported by kthreadcreate properly. This could lead to a kernel crash in...

Kernel update: Virtuozzo ReadyKernel patch 61.0 for Virtuozzo 7.0.8 and 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo 7.0.8 and 7.0.8 HF1. Vulnerability id: PSBM-87836 It was discovered that a container with NFS mounts could keep the files /var/lib/nfs/rpcpipefs/nfs/clntX open, even if no NFS server was...

FreeBSD Denial of Service Vulnerability (CNVD-2020-38783)

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project, headed by the Core Team team, and is an important branch of Unix-like systems that have evolved through BSD, 386BSD, and 4.4BSD. A security vulnerability exists in FreeBSD that stems from the ELF packet header parser not...

FreeBSD : FreeBSD -- Improper ELF header parsing (a67c122a-b693-11e8-ac58-a4badb2f4699)

Insufficient validation was performed in the ELF header parser, and malformed or otherwise invalid ELF binaries were not rejected as they should be. Impact : Execution of a malicious ELF binary may result in a kernel crash or may disclose kernel memory. C Tenable Network Security, Inc. The...

CVE-2018-6924

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF binary to cause a kernel crash or disclose kernel memory...