CVE-2023-22391

A vulnerability in class-of-service CoS queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service DoS. Specific packets are being incorrectly routed to a queue used for other high-priority traffic such a...

PT-2023-9439 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc5-00088-gf3600ff8e322 1930 Description: The vulnerability is related to the iommu/arm-smmu component in the Linux kernel. It occurs when the system is shut down with the "reboot -f" command while a packe...

The vulnerability of Microprogrammed Ethernet Switchboard software, related to memory release errors, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from FortiSwitch is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted LLDP/CDP/EDP packets...

AZL-12995 CVE-2022-3437 affecting package samba 4.12.5-7

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

AZL-12994 CVE-2022-4344 affecting package wireshark for versions less than 4.0.8-1

Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file...

CVE-2023-22396 Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)

An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine RE of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ultimately leads to a Denial of Service Do...

PT-2023-2059 · Mikrotik · Mikrotik Routeros

Name of the Vulnerable Software and Affected Versions: MikroTik RouterOS version 6.40.5 Description: The issue in the bridge2 component of MikroTik RouterOS is related to errors in resource release, which can be exploited by attackers to cause a Denial of Service DoS via crafted packets. This can...

CVE-2023-22414 Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX...

PT-2023-3067 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 12.3R12-S19 through 22.3R2 Juniper Networks Junos OS versions 15.1R7-S10 through 22.3R2 Juniper Networks Junos OS versions 17.3R3-S12 through 22.3R2 Juniper Networks Junos OS versions 18.4R3-S9 through 22.3R...

CVE-2022-38105

An information disclosure vulnerability exists in the cmprocessREQNC opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...

CVE-2022-38105

An information disclosure vulnerability exists in the cmprocessREQNC opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...

Information disclosure

An information disclosure vulnerability exists in the cmprocessREQNC opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...

CVE-2022-38105

An information disclosure vulnerability exists in the cmprocessREQNC opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...

CVE-2022-38105

An information disclosure vulnerability exists in the cmprocessREQNC opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...

PT-2023-1234 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Internet Key Exchange IKE protocol in Windows operating systems, which is associated with insufficient input validation. This can be...

PT-2023-1130 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Internet Key Exchange IKE extension, which can be exploited by a remote attacker to cause a denial of service using...

PT-2023-13590 · Asus · Asus Rt-Ax82U

Name of the Vulnerable Software and Affected Versions: Asus RT-AX82U version 3.0.0.4.386 49674-ge182230 Description: An information disclosure issue exists in the cm processREQ NC opcode of the router's configuration service. A specially-crafted network packet can lead to a disclosure of sensitiv...

PT-2023-1087 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Internet Key Exchange IKE protocol in Windows operating systems, specifically due to insufficient input validation. This can be exploited b...

The vulnerability of TP-Link Archer AX10 router’s microprogramming software allows for an attack where the attacker bypasses authentication by using capture-replay techniques to intercept and replay captured parameters. This enables the attacker to carry out a “man-in-the-middle” type attack and gain unauthorized access to protected information.

The vulnerability of TP-Link Archer AX10 router’s microprogramming software lies in the ability to bypass the authentication process by exploiting the capture-replay technique for manipulating processed HTTP packets. Exploiting this vulnerability allows an attacker to carry out a...

Ubuntu: Security Advisory (USN-5794-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...