CVE-2020-6019

Valve's Game Networking Sockets/Steam Sockets before v1.2.0 contains a vulnerability in CConnectionTransportUDPBase::Received_Data() where inlined statistics messages trigger a libprotobuf exception, causing a crash. Affected component appears in both Steam server and client code paths per multip...

CVE-2020-6019

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::ReceivedData, leading to an exception thrown from libprotobuf and resulting in a crash...

CVE-2020-6019

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::ReceivedData, leading to an exception thrown from libprotobuf and resulting in a crash...

CVE-2020-6019: Uncaught Exception

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::ReceivedData, leading to an exception thrown from libprotobuf and resulting in a crash...

Cisco Adaptive Security Appliance DoS

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s SSL/TLS session processors involves uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by initiating multiple SSL/TLS sessions and...

Cisco Firepower Threat Defense DoS

The vulnerability of Cisco Firepower Threat Defense’s SSL/TLS microprogramming system check mechanisms arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted and corrupted...

kernel: bpf: reject unhashed sockets in bpf_sk_assign

A reference counting flaw was found in the Linux kernel's BPF socket assignment helper when handling unhashed UDP sockets. When a BPF program assigns an unhashed UDP socket to a packet, the function increments the socket reference count assuming SOCKRCUFREE isn't set. However, subsequent bind or...

PT-2025-40748

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the bpf sk assign function related to handling unhashed sockets. Specifically, the function does not properly reject unhashed UDP sockets, leading to ...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2020-2411)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of...

CVE-2020-5936

On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel TMM process may consume excessive resources when processing SSL traffic and client authentication are enabled on the client SSL profile...

Use-after-free

kernel is vulnerable to use-after-free. Unprivileged users are able to create RAW sockets in AFIEEE802154 network protocol...

Cisco Firepower Threat Defense Denial of Service Vulnerability (CNVD-2020-59748)

Cisco Firepower Threat Defense is a suite of unified software for providing next-generation firewall services from Cisco, USA. apt is a command-line package manager from the Debian Project Collaboration that provides search, management, and querying of package information functions. A security...

Cisco Adaptive Security Appliance (ASA) Software Denial of Service Vulnerability

The Cisco Adaptive Security Appliance ASA software is the core operating system that provides robust functionality for the Cisco ASA family. It has a variety of appearances and provides enterprise-class firewall functionality for ASA appliances. A denial of service vulnerability exists in the...

CVE-2020-3572

A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory...

PT-2020-4458 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the SSL/TLS session handler could allow an...

Information disclosure

In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the...

CVE-2020-5136

A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service DoS in the SSL-VPN and virtual assist portal, which leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3,...

GHSA-55W9-C3G2-4RRH Man-in-the-middle attack in Apache Axis

Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or...

A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets bypassing security mechanisms aka CID-26896f01467a.

...

Authorization Bypass

linux kernel is vulnerable to authorization bypass. A missing CAPNETRAW check in the NFC socket creation in net/nfc/rawsock.c allows local attackers to bypass security mechanisms and create raw sockets...