2511 matches found
CVE-2020-3182
A vulnerability in the multicast DNS mDNS protocol configuration of Cisco Webex Meetings Client for MacOS could allow an unauthenticated adjacent attacker to obtain sensitive information about the device on which the Webex client is running. The vulnerability exists because sensitive information ...
CVE-2011-0220
Apple Bonjour before 2011 allows a crash via a crafted multicast DNS packet...
CVE-2011-0220
Apple Bonjour before 2011 is affected by CVE-2011-0220, with a crash caused by processing a crafted multicast DNS packet. The CVE relates to Apple’s mDNSResponder stack; details on affected versions, exact root cause, exploitation status, and available fixes are not provided in the connected docu...
Critical Cisco 'CDPwn' Protocol Flaws Explained: Podcast
Researchers on Wednesday disclosed five critical vulnerabilities in Cisco Discovery Protocol CDP, the Cisco Proprietary Layer 2 network protocol that is used to discover information about locally attached Cisco equipment. Researchers say that the vulnerabilities, which they collectively call CDPw...
PT-2020-7086
Name of the Vulnerable Software and Affected Versions Apple Bonjour versions prior to 2011 Description The issue allows a crash via a crafted multicast DNS packet. Recommendations For Apple Bonjour versions prior to 2011, update to a version released in 2011 or later to resolve the issue...
CVE-2011-0220: Improper Input Validation
Apple Bonjour before 2011 allows a crash via a crafted multicast DNS packet...
Jenkins vulnerable to UDP amplification reflection attack
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier supports two network discovery services UDP multicast/broadcast and DNS multicast by default. The UDP multicast/broadcast service can be used in an amplification reflection attack, as very few bytes sent to the respective endpoint result in much...
PT-2020-15306 · Cloudbees +1 · Jenkins
Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.218 and earlier Jenkins LTS versions 2.204.1 and earlier Description: The issue allows for a UDP amplification reflection denial of service attack on port 33848. This can be exploited by sending a specially crafted UDP...
Cisco IOS XR BGP DoS
The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Multicast Leav...
Cisco IOS XR BGP DoS
The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Mcast Join...
Cisco IOS XR BGP DoS
The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by using a specially created Mcast Join...
Cisco IOS XR BGP DoS
The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Multicast Join...
Cisco IOS XR BGP DoS
The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Multicast Leav...
Cisco IOS XR BGP DoS
The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending a specially crafted BGP EVPN...
CVE-2017-18509
A flaw was found in the Linux kernel’s net/ipv6/ip6mr.c function where setting a specific socket option can cause an inetcsklistenstop general protection fault. An attacker with CAPNETADMIN style privileges inside a container, can crash the system or execute arbitrary code when issuing a speciall...
F5 Networks BIG-IP : MFC vulnerability (K93417064)
The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.1 / 13.1.3.2 / 14.0.1.1 / 14.1.2.1 / 15.1.0. It is, therefore, affected by a vulnerability as referenced in the K93417064 advisory. - On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1...
F5 BIG-IP tmrouted memory leak vulnerability
F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5, Inc. tmrouted is one of the routing table management daemons that supports updating the TMM routing table based on the kernel...
CVE-2019-6681
On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache MFC handling in tmrouted...
CVE-2019-6681
On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache MFC handling in tmrouted...
Design/Logic Flaw
On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache MFC handling in tmrouted...