Input validation

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard...

CVE-2018-1070

OpenShift OpenShift Routing before v3.10 is vulnerable to improper input validation of Routing configurations, enabling DoS that can take down an entire router shard. Affected: OpenShift Container Platform routing component (pre-3.10). Root cause: input validation flaw in Routing configuration. I...

CVE-2018-1070

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard...

Nipe - A Script To Make TOR Network Your Default Gateway

Tor enables users to surf the Internet, chat and send instant messages anonymously, and is used by a wide variety of people for both Licit and Illicit purposes. Tor has, for example, been used by criminals enterprises, Hacktivism groups, and law enforcement agencies at cross purposes, sometimes...

CVE-2018-5106

Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox ...

CVE-2018-5106

Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox ...

BIRD Internet Routing Daemon Denial of Service Vulnerability

The BIRD Internet Routing Daemon is a full-featured dynamic IP routing daemon used on UNIX-like systems. A security vulnerability exists in BIRD Internet Routing Daemon versions prior to 1.6.4. A local attacker can exploit this vulnerability to cause a denial of service stack depletion and daemon...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

Code injection

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

CVE-2018-12066 affects the BIRD Internet Routing Daemon prior to 1.6.4. An attacker with local access can trigger a denial of service (stack consumption and daemon crash) via crafted BGP mask expressions in birdc. Multiple connected sources confirm the fix is in Bird 1.6.4; Fedora advisories and ...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

Troubleshooting NetScaler SD-WAN Reachability

This aim of this article is to help you verify if Virtual Paths/Intranet Service/Internet Service/Passthrough Service is correctly used to reach the destination. 1. Under Monitoring Flows verify that the end client/server traffic is reported under the correct “Service Type”. 2. If the test traffi...

The vulnerability of the Junos operating system, related to insufficient validation of input data, allows a attacker to cause a service failure or a crash and restart of the routing process.

The vulnerability of the Junos operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or errors, and force the restart of the routing process rpd with specially crafted BGP UPDATE...

Cloud Foundry routing-release security bypass vulnerability

Cloud Foundry is a set of open source Platform-as-a-Service PaaS cloud computing platform from the Cloud Foundry Foundation in the United States, which provides container scheduling, continuous delivery, and automated service deployment. routing-release is one of the components that provides HTTP...

CVE-2018-1193

Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections...

Authentication flaw

Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections...

CVE-2018-1193

Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections...