The vulnerability of the packet filtering function of the Cisco IOS XE operating system, which allows a hacker to bypass L2 and L4-level filters

The vulnerability of the packet filtering function in the Cisco IOS XE operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass L2 and L4 filters remotely...

CVE-2020-3444

A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

Cisco SD-WAN vEdge Input Validation Error Vulnerability

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. The Cisco SD-WAN vEdge suffers from an input validation error vulnerability that arises from a network system or product that does not properly validate...

CVE-2020-5937

On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel TMM may produce a core file while processing layer 4 L4 behavioral denial-of-service DoS traffic...

F5 BIG-IP AFM Denial of Service Vulnerability

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A denial of service vulnerability exists in F5 BIG-IP AFM, which can be exploited by an attacker to trigger a denial of service via a fatal...

CVE-2020-3421

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

PT-2020-4189 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to incomplete handling of Layer 4 packets through the device, which could allow an unauthenticated, remote attacker to cause the device to reload or stop...

PT-2020-4188 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE affected versions not specified Description: The issue is related to insufficient validation of unusual or exceptional states in Cisco IOS XE, which could allow a remote attacker to cause a denial of service. The vulnerabilities...

The vulnerability of the traffic filtering component of the Cisco SD-WAN programmable network allows a hacker to bypass the filters at the L2 and L4 levels.

The vulnerability of the Cisco SD-WAN’s programmatically defined traffic filtering component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass L2 and L4 filters using a specially crafted TCP packet...

CVE-2019-1951

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

Cisco SD-WAN Solution Packet Filter Bypass Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco. A packet filter bypass vulnerability exists in Cisco SD-WAN Solution version 19.1.0 and earlier. The vulnerability stems from improper traffic filtering conditions on the affected device. An attacker can exploit this...

CVE-2019-6603

In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs...

CVE-2018-0353

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor L4TM functionality and bypass security protections. The vulnerability is due to a change in the underlying operating system...

Multiple packages, Multiple vulnerabilities fixed in 2012

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. EGroupware VTE Layer Four...

pWhois Layer Four Traceroute (LFT) Unspecified Vulnerability

Whois Layer Four Traceroute LFT is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pWhois Layer Four Traceroute (LFT) Unspecified Vulnerability

This host is installed with Whois Layer Four Traceroute LFT and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbpwhoislftunspecifiedvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ pWhois Layer Four Traceroute LFT Unspecified Vulnerability Authors: Antu Sanadi Copyright c...

UBUNTU-CVE-2011-0765

Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...

Code injection

Unspecified vulnerability in lft in pWhois Layer Four Traceroute LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line...

CVE-2011-0765

CVE-2011-0765 affects Layer Four Traceroute (LFT) on the Linux/Unix ecosystem: Unspecified vulnerability in the lft component of LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line. Connected sources indicate the issue is a local privilege escalation in LFT prior t...

pWhois Layer Four Traceroute 3.x vulnerability

Overview Given a specific set of command line arguments, Layer Four Traceroute lft will produce a segmentation fault leading to a possible privilege escalation vulnerability. Description pWhois Layer Four Traceroute 3.x contains a vulnerability when parsing command line arguments. Earlier version...