5927 matches found
CVE-2018-1193
Cloud Foundry routing-release before version 0.175.0 fails to sanitize user-provided X-Forwarded-Proto headers, allowing a remote attacker to bypass application requirements that enforce secure connections. Root cause: lack of filtering on X-Forwarded-Proto in routing-release/gorouter. Impact: po...
CVE-2018-1193
Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections...
Stealing container ship cargo through LOC messaging
In a previous post post I looked at hacking and manipulating EDIFACT messages to destabilise a ship. However, criminals will be far more interested in using these techniques to re-route containers and steal their contents. Similar techniques appear to have been used to steal containers in the pas...
The vulnerability of the routing mechanism implemented by the Forwarding Information Base (FIB) in the Cisco IOS XE operating system allows a attacker to cause a service failure.
The vulnerability of the routing mechanism that implements the Forwarding Information Base FIB in the Cisco IOS XE operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Socks5 Proxy Server
This module provides a socks5 proxy server that uses the builtin Metasploit routing to relay connections...
Quagga: Multiple vulnerabilities
Background Quagga is a free routing daemon replacing Zebra supporting RIP, OSPF and BGP. Description Multiple vulnerabilities have been discovered in Quagga. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by sending specially crafted packets, could execu...
Juniper Junos Routing Process Daemon (RPD) BGP UPDATE Packet Handling Unspecified Remote DoS (JSA10848)
According to its self-reported version number, the remote Junos device is affected by a remote denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109214; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...
Juniper Junos Connectionless Network Protocol (CLNP) Packet Handling Unspecified Remote Code Execution / DoS (JSA10844)
According to its self-reported version number, the remote Juniper Junos device is affected by an unspecified flaw that is triggered when handling Connectionless Network Protocol CLNP packets. This allows a remote attacker to crash a device or execute arbitrary code. Note: This issue is only...
Juniper Junos VPLS Routing MPLS Packet Handling mbuf Exhaustion Remote DoS (JSA10845)
According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109211; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/20...
Juniper Junos VPLS Routing MPLS Packet Handling mbuf Exhaustion Remote DoS (JSA10855)
According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. TRUSTED...
Kernel update: Virtuozzo ReadyKernel patch 48.1 for Virtuozzo 7.0.1 to 7.0.5
The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the Virtuozzo 7.0 kernels 3.10.0-327.42.0.vz7.18.7 7.0.1, 3.10.0-327.42.0.vz7.20.18 7.0.3, 3.10.0-514.16.1.vz7.30.10 7.0.4, 3.10.0-514.16.1.vz7.30.15 7.0.4 HF3, and 3.10.0-514.26.1.vz7.33.22 7.0.5...
CVE-2018-0020
Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon rpd crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to oth...
Junos OS: rpd daemon cores due to malformed BGP UPDATE packet
Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon rpd crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to oth...
CVE-2018-0022
A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when processing a specific MPLS packet. Approximately 1 mbuf is leaked per each packet processed. The number of mbufs is platform dependent. The following command provides the number...
Design/Logic Flaw
Receipt of a specially crafted Connectionless Network Protocol CLNP datagram destined to an interface of a Junos OS device may result in a kernel crash or lead to remote code execution. Devices are only vulnerable to the specially crafted CLNP datagram if 'clns-routing' or ES-IS is explicitly...
CVE-2018-0016
Receipt of a specially crafted Connectionless Network Protocol CLNP datagram destined to an interface of a Junos OS device may result in a kernel crash or lead to remote code execution. Devices are only vulnerable to the specially crafted CLNP datagram if 'clns-routing' or ES-IS is explicitly...
CVE-2018-0022
CVE-2018-0022 documents a mbuf leak in Juniper Junos OS when VPLS routing-instances process specific MPLS packets, causing mbuf exhaustion and potential device inaccessibility requiring a restart. Affected are Junos OS with VPLS configured across multiple releases (list of versions in the CVE). T...
Kernel update: Virtuozzo ReadyKernel patch 48.0 for Virtuozzo 7.0.6 and 7.0.6 HF3
The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the Virtuozzo 7.0 kernels 3.10.0-693.1.1.vz7.37.30 7.0.6 and 3.10.0-693.11.6.vz7.40.4 7.0.6 HF3. Vulnerability id: PSBM-81798 It was discovered that IPv6 routing tables incorrectly handled routing...
