Design/Logic Flaw

antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration...

CVE-2020-10587

CVE-2020-10587 affects antiX and MX Linux. A local attacker can obtain root access through the Sudo configuration by abusing the persist-config --command /bin/sh vector. The root cause is a misconfigured Sudo setup that allows execution of a shell with elevated privileges from a local context. Pu...

CVE-2020-10587

antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration...

Junos OS: Broadband Edge Service Denial of Service (DoS) Vulnerability (JSA10987)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to an unspecified issue in the processing of packets destined to Broadband Edge BBE clients connected to MX Series subscriber management platforms. Receipt of a...

CVE-2020-1608

Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge BBE service may trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of packets destined to BBE clients connected to MX Serie...

Code injection

Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge BBE service may trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of packets destined to BBE clients connected to MX Serie...

CVE-2020-1608 Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service

Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge BBE service may trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of packets destined to BBE clients connected to MX Serie...

CVE-2020-1608

CVE-2020-1608 affects Juniper Networks Junos OS on MX Series in BBE configurations. Receipt of a specific MPLS or IPv6 packet on the core-facing interface may trigger a kernel crash (vmcore) and reboot, tied to processing for BBE clients. Affected Junos versions span multiple tracks: 17.2R2-S6 on...

RUSTSEC-2020-0001 Stack overflow when resolving additional records from MX or SRV null targets

There's a stack overflow leading to a crash and potential DOS when processing additional records for return of MX or SRV record types from the server. This is only possible when a zone is configured with a null target for MX or SRV records, i.e. '.'. Example effected zone record: text no-service...

Stack overflow when resolving additional records from MX or SRV null targets

There's a stack overflow leading to a crash and potential DOS when processing additional records for return of MX or SRV record types from the server. This is only possible when a zone is configured with a null target for MX or SRV records, i.e. '.'. Example effected zone record: text no-service...

PT-2020-17489 · Trust Dns · Trust-Dns-Server

Name of the Vulnerable Software and Affected Versions: trust-dns-server versions prior to 0.18.1 Description: An issue was discovered in the trust-dns-server crate, where DNS MX and SRV null targets are mishandled, causing stack consumption. This can lead to a stack overflow, resulting in a crash...

The vulnerability of Junos OS routers from the NFX150, EX9200 series, with NG-RE, MX with NG-RE, PTX with NG-RE, and QFX10K with NG-RE families, arises due to incorrect restrictions on path names to restricted access directories. This allows attackers to gain unauthorized access to protected information.

The vulnerability of Junos OS router models in the NFX150, EX9200 with NG-RE, MX with NG-RE, PTX with NG-RE, and QFX10K with NG-RE series is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access t...

New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections. The...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2019-41475)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in Juniper Networks Junos OS MX Series. The vulnerability originates from a...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2019-41476)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in Juniper Networks Junos OS MX Series. The vulnerability originates from a...

The vulnerability of the jdhcpd daemon in Junos OS MX Series routers allows a attacker to cause a service failure.

The vulnerability of the jdhcpd daemon in Junos OS MX Series routers is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted DHCP packets...

The vulnerability of the SIP ALG application-level gateway on Junos OS MX Series routers allows a attacker to cause a service failure.

The vulnerability of the SIP ALG application-level gateway on Junos OS MX Series routers stems from resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...

CVE-2019-0074

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

CVE-2019-0074

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

CVE-2019-0063

When an MX Series Broadband Remote Access Server BRAS is configured as a Broadband Network Gateway BNG with DHCPv6 enabled, jdhcpd might crash when receiving a specific crafted DHCP response message on a subscriber interface. The daemon automatically restarts without intervention, but continuous...