Lucene search
+L

330 matches found

Prion
Prion
•added 2022/05/05 5:15 p.m.•37 views

Design/Logic Flaw

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel TMM allows an attack...

5CVSS7.4AI score0.01073EPSS
SaveExploits0References1Affected Software11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/05 12:00 a.m.•7 views

CVE-2022-26071: Use of Insufficiently Random Values

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel TMM allows an attack...

7.5CVSS7.2AI score0.01073EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/05 12:00 a.m.•2 views

PT-2022-17652

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 16.1.2.2 F5 BIG-IP versions prior to 15.1.5.1 F5 BIG-IP versions prior to 14.1.4.6 F5 BIG-IP versions prior to 13.1.5 F5 BIG-IP versions 12.1.x F5 BIG-IP versions 11.6.x Description A flaw in the Traffic Management...

7.5CVSS0.01073EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/05/04 2:00 p.m.•11 views

CVE-2022-26071

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel TMM allows an attack...

7.5CVSS7.1AI score0.01073EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/02/26 4:15 a.m.•44 views

CVE-2020-36516

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session...

5.9CVSS0.00672EPSS
SaveExploits0References2
OSV
OSV
•added 2022/02/26 4:15 a.m.•18 views

CVE-2020-36516

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session...

5.9CVSS6.2AI score
SaveExploits0References2
OSV
OSV
•added 2022/02/26 4:15 a.m.•5 views

DEBIAN-CVE-2020-36516

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session...

5.9CVSS6.2AI score0.00672EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2022/02/26 4:15 a.m.•71 views

CVE-2020-36516

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session...

5.9CVSS6.5AI score0.00672EPSS
SaveExploits0References5
OSV
OSV
•added 2022/02/26 4:15 a.m.•14 views

UBUNTU-CVE-2020-36516

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session...

6.3CVSS6.7AI score0.00672EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2022/02/26 3:14 a.m.•97 views

CVE-2020-36516

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session...

5.9CVSS6.7AI score0.00672EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/26 12:00 a.m.•5 views

CVE-2020-36516: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session...

5.9CVSS6.5AI score0.00672EPSS
SaveExploits0References2
NVD
NVD
•added 2022/02/18 6:15 p.m.•31 views

CVE-2021-20322

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

7.4CVSS0.06902EPSS
SaveExploits0References9
OSV
OSV
•added 2022/02/18 6:15 p.m.•21 views

CVE-2021-20322

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

7.4CVSS7.2AI score
SaveExploits0References9
Prion
Prion
•added 2022/02/18 6:15 p.m.•37 views

Design/Logic Flaw

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

5.8CVSS7AI score0.06902EPSS
SaveExploits0References9Affected Software7
Cvelist
Cvelist
•added 2022/02/18 5:50 p.m.•60 views

CVE-2021-20322

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

7.5AI score0.06902EPSS
SaveExploits0References9
CVE
CVE
•added 2022/02/18 5:50 p.m.•470 views

CVE-2021-20322

CVE-2021-20322 relates to a Linux kernel ICMP handling flaw (ICMP fragment needed/redirect) that lets an off-path attacker quickly discover UDP port usage, bypassing UDP source port randomization. The connected advisories confirm this affects the Linux kernel and multiple distributions and mentio...

7.4CVSS6.5AI score0.06902EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
•added 2022/02/18 5:50 p.m.•94 views

CVE-2021-20322

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

7.4CVSS6.5AI score0.06902EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•8 views

CVE-2021-20322: Use of Insufficiently Random Values

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

7.4CVSS7AI score0.06902EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
•added 2022/02/09 12:00 a.m.•72 views

AlmaLinux 8 : kernel (ALSA-2021:0558)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:0558 advisory. - A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor...

7.8CVSS6.8AI score0.06692EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
•added 2021/10/28 12:00 a.m.•39 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : ntp Vulnerability (NS-SA-2021-0142)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ntp packages installed that are affected by a vulnerability: - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofe...

7.5CVSS6.8AI score0.02116EPSS
SaveExploits0References3
Rows per page
Query Builder