CVE-2018-11980

The CVE-2018-11980 issue is a buffer overflow in Qualcomm/Snapdragon WLAN host code caused by a missing length check in wma_process_bip when handling a fake 11w multicast rmf without mmie. Affected are Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra...

Xiaomi AI Speaker-mDNS service suffers from denial of service vulnerability

Xiaomi AI Speaker is a smart speaker product from Xiaomi. A denial of service vulnerability exists in the Xiaomi AI Speaker-mDNS service. The vulnerability is caused by the program service failing to adequately determine malformed messages when parsing request messages, causing the parsing thread...

Heap corruption vulnerability in Xiaomi AI Speaker-mDNS service

Xiaomi AI Speaker is a smart speaker product from Xiaomi. A heap corruption vulnerability exists in the Xiaomi AI Speaker-mDNS service. The vulnerability is due to the program service in the parsing of the request message there is a boundary check is not strict, resulting in the arbitrary write o...

Junos OS: Multicast flowd DoS (JSA10968)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the flowd process. An unauthenticated, remote attacker can exploit this issue, by repeatedly sending specific multicast packets to an affected device, to cause the device to stop...

Junos OS: srxpfe PIM DoS (JSA10976)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service DoS vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices. An unauthenticated, remote attacker can exploit this issue, by repeatedly...

The vulnerability of the srxpfe process in the JunOS operating system’s SRX Series network interfaces allows a attacker to trigger a service failure.

The vulnerability of the srxpfe process in the JunOS operating system’s SRX Series network interfaces is related to errors in processing PIM messages. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Next-Generation Multicast VPN (NG-mVPN) service in the Junos OS allows a attacker to cause a service failure.

The vulnerability of the Next-Generation Multicast VPN NG-mVPN service in the Junos OS operating system is related to the lack of data validation during transmission. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted IPv4 packets...

CVE-2019-0075

A vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases...

CVE-2019-0066

An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...

CVE-2019-0068

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

CVE-2019-0068

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

Denial of service

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

CVE-2019-0075

The CVE-2019-0075 issue affects Juniper Networks Junos OS on SRX Series, specifically the srxpfe process when handling Protocol Independent Multicast (PIM) messages. A vulnerable state can cause the srxpfe process to crash and trigger an FPC reboot, potentially leading to an extended denial-of-se...

CVE-2019-0066

CVE-2019-0066 affects Juniper Junos OS NG-mVPN: an unexpected status return value in the NG-mVPN service can be triggered by a crafted malformed IPv4 packet, allowing an unauthenticated remote attacker to cause a Denial of Service by core-dumping the routing protocol daemon (rpd). Impact is a DoS...

CVE-2019-0068

CVE-2019-0068 affects Juniper Networks Junos OS on SRX Series, where the SRX flowd process may crash and restart when handling specific multicast packets. A remote, unauthenticated attacker can trigger a sustained Denial of Service by repeatedly sending the crafted multicast traffic, causing the ...

CVE-2019-0068 Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

Debian DLA-1884-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-18509 Denis Andzakovic reported a missing type check in the IPv4 multicast routing implementation. A user with the CAPNETADMIN capability in a...

DEBIAN-CVE-2017-18509

An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inetcsklistenstop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue...

UBUNTU-CVE-2017-18509

An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inetcsklistenstop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue...

kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c

A flaw was found in the Linux Kernel in the ucmaleavemulticast function in drivers/infiniband/core/ucma.c which allows access to a certain data structure after freeing it in ucmaprocessjoin. This allows an attacker to cause a use-after-free bug and to induce kernel memory corruption, leading to a...