CLSA-2026-1777539404 squid34: Fix of 12 CVEs

CVE-2019-12525: fix heap buffer over-read in Digest auth parameter parsing - CVE-2018-1000027: fix NULL pointer dereference in X-Forwarded-For logging for internal transactions - CVE-2018-19131: escape certificate field injection via %D in ERRSECURECONNECTFAIL page - CVE-2018-19132: fix memory...

EUVD-2011-3806

Malware in sbrugna...

Input validation

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient input...

CVE-2020-3235: Incorrect Access of Indexable Resource

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient input...

CVE-2020-6058: Out-of-bounds Read

An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out-of-bounds memory read, which can result in the disclosure of sensitive information and denial of service. To trigger this...

Code injection

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon RPD process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Network...

CVE-2019-0043 Junos OS: RPD process crashes upon receipt of a specific SNMP packet

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon RPD process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Network...

CVE-2019-0043: Improper Resource Shutdown or Release

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon RPD process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Network...

Buffer overflow

The Simple Network Management Protocol SNMP subsystem of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.2 through 3.17 contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to...

CVE-2017-2345: Improper Input Validation

On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS snmpd daemon to crash and restart by sending a crafted SNMP packet. Repeated crashes of the snmpd daemon can result in a partial denial of service condition. Additionally, it ma...

CVE-2017-6741: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a...

CVE-2017-6737: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a...

CVE-2017-6739: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a...

Juniper Networks Junos OS SNMPD RCE Vulnerability

Junos OS is prone to a remote code execution vulnerability when receiving a crafted SNMP packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Code injection

The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service snmpd daemon reload via a malformed SNMP packet, aka Bug ID CSCur25858...

PT-2015-4788

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue allows remote authenticated users to cause a denial of service, resulting in the snmpd daemon reload, by sending a malformed SNMP packet. Recommendations At the moment, there i...

CVE-2015-0661: Improper Input Validation

The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service snmpd daemon reload via a malformed SNMP packet, aka Bug ID CSCur25858...

CA Directory buffer overflow

Buffer overflow on SNMP-packet parsing...

Design/Logic Flaw

Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP packet...

CVE-2011-3849

The CVE-2011-3849 issue affects CA Directory and CA eTrust Directory (dxserver) before build 6279 (SP7 CR1 for r12). The root cause is insufficient bounds checking in SNMP packet parsing, enabling remote, unauthenticated attackers to trigger a denial of service (daemon crash) via crafted SNMP tra...