The vulnerability of the Routing Protocol Daemon (rpd) in Juniper Networks’ Junos OS Evolved and Junos operating systems allows a attacker to cause a service failure.

The vulnerability of the Routing Protocol Daemon rpd in Juniper Networks’ Junos OS Evolved and Junos operating systems exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2023-22340

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technic...

CVE-2023-22842

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software...

CVE-2023-22340

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technic...

CVE-2023-22340

CVE-2023-22340 affects F5 BIG-IP SIP profile when configured on a Message Routing type virtual server. The root cause is a traffic-triggered condition that can cause the TMM process to terminate, resulting in DoS. Affected versions include BIG-IP 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1...

F5 BIG-IP 缓冲区错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP SIP profile, where undisclosed traffic could cause TMM to terminate...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP SIP profile, where undisclosed traffic could cause TMM to terminate...

F5 BIG-IP SIP profile denial of service vulnerability (CNVD-2023-05958)

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP SIP profile, where undisclosed traffic could cause TMM to terminate...

PT-2023-1430 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.5.2 BIG-IP versions 15.1.x through 15.1.7 BIG-IP versions 16.1.x through 16.1.3.2 Description: The issue is related to errors in data processing in BIG-IP Access Policy Manager and...

The vulnerability of Juniper Networks Junos OS routing devices of the SRX and EX series allows a attacker to execute arbitrary commands and gain full control over the device.

The vulnerability of Juniper Networks Junos OS routing devices of the SRX and EX series lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain full control over...

PT-2023-2760 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.11 Description: The issue is related to the implementation of the NET/ROM network protocol in the Linux kernel. It involves a use-after-free error in the af netrom.c module, specifically in the nr release...

Privilege Escalation

cakephp/cakephp is vulnerable to Privilege Escalation. A remote attacker is able to directly access prefixed actions without setting the correct request parameters due to unconventional URL paths, which allows an attacker to elevate privileges when the authorization depends on the presence of the...

The vulnerability of the Demon Routing Protocol Daemon (rpd) in JunOS and JunOS Evolved operating systems allows a hacker to induce a service failure.

The vulnerability of the Demon Routing Protocol Daemon rpd for JunOS and JunOS Evolved is related to insufficient validation of input data during the processing of BGP messages. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Improper Access Control

github.com/kubeoperator/kubepi is vulnerable to Improper Access Control. A remote attacker is able to bypass the system's preset permission settings to access restricted API interfaces which leak sensitive user information. The vulnerability also impacts how online applications handle routing...

GSD-2023-1000632 cxl: Fix refcount leak in cxl_calc_capp_routing

cxl: Fix refcount leak in cxlcalccapprouting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

Exploit for Code Injection in Vmware Spring_Cloud_Function

CVE-2022-22963 Exploit Description In Spring Cloud Funct...

CVE-2023-22407

An Incomplete Cleanup vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. An rpd crash can occur when an MPLS TE tunnel configuration change occurs on a directly connected...

CVE-2023-22402

A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Non Stop Routing NSR scenario, an unexpected kernel restart might be observed if "bgp auto-discovery" is enabled and if there ...

CVE-2023-22406

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flap...

CVE-2023-22396

An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine RE of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ultimately leads to a Denial of Service Do...