CVE-2020-24634: Improper Neutralization of Special Elements used in a Command

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI Aruba Networks AP Management protocol UDP port 8211 of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility...

CVE-2020-24633: Buffer Copy without Checking Size of Input

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211 of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series...

PT-2020-15784

Name of the Vulnerable Software and Affected Versions Aruba 9000 Gateway versions prior to the fixed version Aruba 7000 Series Mobility Controllers versions prior to the fixed version Aruba 7200 Series Mobility Controllers versions 2.1.0.1 through 2.2.0.0 Aruba 7200 Series Mobility Controllers...

PT-2020-15785

Name of the Vulnerable Software and Affected Versions Aruba 9000 Gateway versions 2.1.0.1 through 2.2.0.0 Aruba 7000 Series Mobility Controllers versions 6.4.4.23 through 6.5.4.17 Aruba 7200 Series Mobility Controllers versions 8.2.2.9 through 8.7.0.0 Description An attacker can remotely inject...

papi bug fix and enhancement update

An update is available for libpfm, papi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

ALBA-2020:4764 papi bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

CVE-2018-7081

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

Remote code execution

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

CVE-2018-7081

CVE-2018-7081 affects ArubaOS network-listening components on certain Mobility Controllers. The issue enables remote code execution when an attacker can send specially-crafted IP traffic to the device via the PAPI protocol over UDP port 8211. If successful, this could crash a process or allow arb...

CVE-2018-7081

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

CVE-2018-7081: Improper Input Validation

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

PT-2019-11081

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: A remote code execution issue is present in network-listening components. An attacker could exploit this by transmitting specially-crafted IP traffic to a mobility controller, potentially...

Fedora 28 : papi (2018-5f7b78636d)

Changes to the spec file ensure the executables are built with the LDFLAGS and CFLAGS flags as described on https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/master/f/bui ldflags.md to improve the security of the executables. Note that Tenable Network Security has extracted the preceding...

[SECURITY] Fedora 28 Update: papi-5.6.0-5.fc28

PAPI provides a programmer interface to monitor the performance of running programs...

Multiple vulnerabilities fixed in Aruba networks products

Multiple vulnerabilities have been discovered in various Aruba Networks products including Instant and ArubaOS access points, the Airwave management platform and the PAPI protocol that these systems mutually use. Some vulnerabilities have been fixed, others will be fixed in a future update, and f...

Aruba Authentication Bypass / Insecure Transport / Tons Of Issues

Aruba ArubaOS/Aruba Instant/AirWave Management - Multiple Vulnerabilities ------------------------------------------------------------------------- Introduction ============ Multiple vulnerabilities were identified in Aruba AP, IAP and AMP devices. The Vulnerabilities were discovered during a bla...