15 matches found
SUSE CVE-2026-43383
In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
UBUNTU-CVE-2026-43383
In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
CVE-2026-43383
In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
Linux Distros Unpatched Vulnerability : CVE-2026-43383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function fo...
EUVD-2021-2916
Malicious code in bioql PyPI...
CVE-2021-0297
A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...
Authentication flaw
A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...
CVE-2021-0297
The CVE-2021-0297 issue affects Juniper Networks Junos OS Evolved: TCP MD5 authentication processing may allow a BGP/LDP session with MD5 enabled to succeed against a peer that is not configured for MD5. Affected are Junos OS Evolved versions prior to 20.3R2-S1-EVO, 20.4 prior to 20.4R2-EVO, and ...
CVE-2021-0297 Junos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication
A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...
Juniper Junos OS Vulnerability (JSA11211)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11211 advisory. - A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to...
FreeBSD : FreeBSD -- TCP MD5 signature denial of service (79dfc135-600a-11e6-a6c3-14dae9d210b8)
A programming error in processing a TCP connection with both TCPMD5SIG and TCPNOOPT socket options may lead to kernel crash. Impact : A local attacker can crash the kernel, resulting in a denial-of-service. A remote attack is theoretically possible, if server has a listening socket with TCPNOOPT...
FreeBSD-SA-16:05.tcp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:05.tcp Security Advisory The FreeBSD Project Topic: TCP MD5 signature denial of service Category: core Module: kernel Announced: 2016-01-14 Credits: Ryan...
BGP implementations do not properly handle UPDATE messages
Overview BGP implementations from multiple vendors including Juniper may not properly handle specially crafted BGP UPDATE messages. These vulnerabilities could allow an unauthenticated, remote attacker to cause a denial of service. Disrupting BGP communication could lead to routing instability...
BGP Service Detection
The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router. C Tenable Network Security, Inc. See RFC 1771 include"compat.inc"; ifdescription scriptid11907; scriptversion "1.13"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"B...
tcp.md5.router.dos.txt
Date: Mon, 14 Jun 1999 14:29:54 -0400 From: Craig Metz To: [email protected] Subject: TCP MD5 option problem I was implementing the RFC 2385 "Protection of BGP Sessions via the TCP MD5 Signature Option" option in the OpenBSD stack. For those who don't know the significance of this option, it i...