CVE-2025-21593

Summary (supported by provided documents): CVE-2025-21593 is an improper resource lifecycle control vulnerability in Juniper Junos OS and Junos OS Evolved dengan rpd, exploitable by an unauthenticated network attacker on devices with SRv6 enabled. The attacker can send malformed BGP UPDATE packet...

CVE-2025-21593 Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial-of-Service DoS. On devices with SRv6 Segment Routing over IPv6 enabled, an...

CVE-2025-21593: Improper Control of a Resource Through its Lifetime

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial-of-Service DoS. On devices with SRv6 Segment Routing over IPv6 enabled, an...

CVE-2022-48687

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining HMAC data that can later be used to sign IPv6 Segment Routing Headers. This configuration is realised via netlink through four attributes:...

CVE-2022-48687 ipv6: sr: fix out-of-bounds read when setting HMAC data.

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining HMAC data that can later be used to sign IPv6 Segment Routing Headers. This configuration is realised via netlink through four attributes:...

CVE-2022-48687

CVE-2022-48687 affects the Linux kernel SRv6 HMAC configuration. The vulnerability stems from the SECRETLEN length being decoupled from SECRET, allowing invalid combinations (e.g., secret="", secretlen=64) that an attacker can craft via netlink to trigger an out-of-bounds read of up to 64 bytes p...

CVE-2022-22228 Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet

An Improper Validation of Specified Type of Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an attacker to cause an RPD memory leak leading to a Denial of Service DoS. This memory leak only occurs when the attacker's packets are destined to any configure...

PT-2022-7445

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds read when setting HMAC data in the SRv6 layer of the Linux kernel. This configuration is realized via netlink through four attributes: SEG6 ATTR...

GSD-2022-1004863 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.289 by commit...

GSD-2022-1004695 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

GSD-2022-1004389 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...

GSD-2022-1004172 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

PT-2022-32957

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description The issue concerns the SRv6 End.B6 and End.B6.Encaps behaviors in the Linux Kernel, where the skb checksum is not properly fixed. The actual impact and attack plausibility have not yet been...

PT-2022-32829

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue concerns the SRv6 End.B6 and End.B6.Encaps behaviors in the Linux Kernel, where the skb checksum is not properly fixed. This could potentially lead to security vulnerabilities,...

PT-2022-32434

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue concerns the SRv6 End.B6 and End.B6.Encaps behaviors in the Linux Kernel, where the skb checksum is not properly fixed. The actual impact and attack plausibility have not yet been...

PT-2022-33125

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.289 Description The issue concerns the SRv6 End.B6 and End.B6.Encaps behaviors in the Linux Kernel, where the skb checksum is not properly fixed. The actual impact and attack plausibility have not yet been...

PT-2022-32651

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue concerns the SRv6 End.B6 and End.B6.Encaps behaviors in the Linux Kernel, where the skb checksum is not properly fixed. The actual impact and attack plausibility have not yet been...

PT-2022-33054

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.253 Description The issue concerns the SRv6 End.B6 and End.B6.Encaps behaviors in the Linux Kernel, where the skb checksum is not properly fixed. The actual impact and attack plausibility have not yet been...

frr:zebra: Stack-buffer-overflow in stream_get2

Project: https://github.com/FRRouting/frr.git Detailed Report: https://oss-fuzz.com/testcase?key=5267954627903488 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerasanfrr Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffc28598fe0 Crash...