Vulnerabilities fixed in Cisco IOS XR

Cisco has fixed vulnerabilities in Cisco IOS XR Software. The vulnerabilities are in the command-line interface CLI of Cisco IOS XR, which allows authenticated local attackers to execute arbitrary root-level commands or obtain full administrative privileges. In addition, there is a problem with t...

EUVD-2017-2265

Malware in sbrugna...

EUVD-2018-0845

Malware in sbrugna...

EUVD-2021-18287

Malware in sbrugna...

EUVD-2018-0856

Malware in sbrugna...

EUVD-2020-12541

Malware in sbrugna...

EUVD-2020-12525

Malware in sbrugna...

EUVD-2020-12511

Malware in sbrugna...

EUVD-2021-18284

Malware in sbrugna...

EUVD-2014-3757

Malware in sbrugna...

EUVD-2021-6697

Malicious code in bioql PyPI...

EUVD-2021-2906

Malicious code in bioql PyPI...

EUVD-2024-38075

Malicious code in bioql PyPI...

EUVD-2024-38352

Malicious code in bioql PyPI...

CVE-2024-39564

CVE-2024-39564 describes a double-free vulnerability in Juniper’s routing process daemon (rpd) for Junos OS and Junos OS Evolved. A malformed BGP Path attribute update can trigger a memory double-free in the rpd log path, causing the process to crash and resulting in a Denial of Service. Affected...

Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service (CVE-2021-1230)

A vulnerability with the Border Gateway Protocol BGP for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service DoS condition. This...

CVE-2022-22080

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22080

The CVE-2022-22080 entry concerns Qualcomm Snapdragon firmware: improper validation of a backend id in the PCM routing process can cause memory corruption across Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, and Voice & Music components. Root cause is memory-corrup...

CVE-2021-35098

Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-31374

On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this message will create a sustained Denial of...