CVE-2020-3363: Improper Input Validation

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. A...

DEBIAN-CVE-2020-16092

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in...

CVE-2020-16092

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in...

Denial of service

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in...

CVE-2020-16092

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in...

UBUNTU-CVE-2020-16092

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in...

CVE-2020-16092

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in...

CVE-2020-16092

CVE-2020-16092 affects QEMU up to 5.0.0, specifically the network packet processing path. The vulnerability is an assertion failure in net_tx_pkt_add_raw_fragment() within hw/net/net_tx_pkt.c, impacting the e1000e and vmxnet3 devices. A malicious guest user/process could trigger this assertion to...

CVE-2020-16092

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in...

CVE-2020-16092

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in...

PT-2020-4214

Name of the Vulnerable Software and Affected Versions: Cisco Small Business Smart and Managed Switches affected versions not specified Cisco Small Business 250 Series affected versions not specified Cisco Small Business 350 Series affected versions not specified Cisco Small Business 350X Series...

CVE-2020-16092

An assertion failure flaw was found in QEMU in the network packet processing component. This issue affects the "e1000e" and "vmxnet3" network devices. This flaw allows a malicious guest user or process to abort the QEMU process on the host, resulting in a denial of service...

PT-2020-22557

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash occurs in the following functions: process ndpi collected info, packe...

PT-2020-22536

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash occurs in the following functions: ndpi strdup, process ndpi collecte...

PT-2020-22199

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions get ndpi flow info6, packet processing, and ndpi workflow process...

OSV-2020-177 UNKNOWN in get_ndpi_flow_info6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20747 Crash type: UNKNOWN Crash state: getndpiflowinfo6 packetprocessing ndpiworkflowprocesspacket...

PT-2020-21967

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash reported by OSS-Fuzz, with a crash type of UNKNOWN. The crash state involves several functions: get ndpi flow info6, packet...

PT-2020-22421

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of functions such as get ndpi flow inf...

PT-2020-21982

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the get ndpi flow info function, packet processing, an...

The vulnerability in the implementation of the Common Industrial Protocol (CIP) for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the Common Industrial Protocol CIP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data during the processing of CIP packets. Exploiting this vulnerability can allow a malicious actor to cause service...