Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited to cause a denial of service by an attacker who sends "S1SETUP request" messages missing the required...

PT-2025-1410 · Open5Gs · Open5Gs Mme

Name of the Vulnerable Software and Affected Versions: Open5GS MME versions = 2.6.4 Description: The issue is related to an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Capability Info Indication message missing a require...

PT-2025-1405 · Unknown · Open5Gs Mme

Name of the Vulnerable Software and Affected Versions: Open5GS MME versions prior to 2.6.4 Description: The issue concerns an assertion in Open5GS MME that can be remotely triggered via a sufficiently large ASN.1 packet sent over the S1AP interface. An attacker can repeatedly send such oversized...

PT-2025-1409

Name of the Vulnerable Software and Affected Versions Open5GS MME versions = 2.6.4 Description The issue is related to an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an S1Setup Request message missing a required Global eNB ID...

PT-2025-1429 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "S1Setup Request" packet that is missing an expected Supported T...

PT-2025-1431 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A Null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "Initial UE Message" packet missing an expected RRC Establishmen...

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from the fact that incorrect manipulation of parameter s1 can lead to SQL injection...

PT-2024-20407 · Athonet · Athonet Vepc Mme

Name of the Vulnerable Software and Affected Versions: Athonet vEPC MME version 11.4.0 Description: The issue is related to an invalid memory access when handling the ProtocolIE ID field of S1Setup Request messages. This allows attackers to cause a Denial of Service DoS to the cellular network by...

PT-2024-7202

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 21.3R3-S1 Junos OS versions 21.4 prior to 21.4R3 Junos OS versions 22.1 prior to 22.1R2 Junos OS versions 22.2 prior to 22.2R1-S2, 22.2R2 Description A deadlock in the packet forwarding engine PFE of Juniper Networks...

Sonos One Speakers S1 App < 11.2.3 build 57923290, S2 App < 13.4.1 Multiple Vulnerabilities

Sonos One speakers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/a:sonos:";...

Sonos One Speakers S1 App < 11.7.1, S2 App < 15.1 Multiple Vulnerabilities

Sonos One speakers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/a:sonos:";...

Sonos S1和Sonos S2 安全漏洞

Sonos S1 and Sonos S2 are both a series of smart speakers from Sonos USA. A security vulnerability exists in Sonos S1 versions prior to 11.12, Sonos S2 versions prior to 15.9, which stems from allowing persistent execution of arbitrary code with Linux kernel privileges...

Sonos S1和Sonos S2 安全漏洞

Sonos S1 and Sonos S2 are both a range of smart speakers from US-based Sonos. A security vulnerability exists in Sonos S1 versions prior to 11.12 and Sonos S2 versions prior to 15.9, which stems from a failure to properly validate a message element during the negotiation of the WPA2 four-way...

ISC BIND DoS Vulnerability (CVE-2024-4076) - Linux

ISC BIND is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; if...

ISC BIND DoS Vulnerability (CVE-2024-0760) - Windows

ISC BIND is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; if...

ALPINE-CVE-2024-0760

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0...

CVE-2024-0760

CVE-2024-0760 affects ISC BIND 9, specifically versions 9.18.1–9.18.27, 9.19.0–9.19.24, and 9.18.11-S1–9.18.27-S1. Description: a malicious client can flood the server with DNS messages over TCP, potentially destabilizing the server; recovery is possible after the attack stops. Impact is availabi...

CVE-2024-39550

A Missing Release of Memory after Effective Lifetime vulnerability in the rtlogd process of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, adjacent attacker to trigger internal events cause which can be done by repeated port flaps to cause a slow memory leak, ultimate...

CVE-2024-39548 Junos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak

An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service DoS condition. The processes do not recover on their own and must be...

CVE-2024-39543 Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash

A Buffer Copy without Checking Size of Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to send specific RPKI-RTR packets resulting in a crash, creating a Denial of Service DoS...