CVE-2024-56318

Matter (aka connectedhomeip/Project CHIP) contains a NULL pointer dereference in TCPBase::ProcessSingleMessage triggered by TCP packets with zero messageSize, affecting raw_TCP.cpp in versions up to and including 1.4.0.0 before commit 27ca6ec. This could lead to denial of service. Affected produc...

Cisco Firepower Threat Defense 安全漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A security vulnerability exists in Cisco Firepower Threat Defense that stems from improper memory management by the Snort detection engine when processing specific TCP or...

The vulnerability of the flow processing daemon (flowd) in Juniper Networks’ Junos routers of the SRX4600 and SRX5000 series allows a hacker to circumvent existing security restrictions.

The vulnerability of the flow processing daemon flowd in Juniper Networks’ Junos routers of the SRX4600 and SRX5000 series is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by...

CVE-2024-43647

A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 6ES7288-1CR40-0AA0 All versions, SIMATIC S7-200 SMART CPU CR60 6ES7288-1CR60-0AA0 All versions, SIMATIC S7-200 SMART CPU SR20 6ES7288-1SR20-0AA0 All versions, SIMATIC S7-200 SMART CPU SR20 6ES7288-1SR20-0AA1 All versions, SIMATI...

CVE-2024-43647

A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 6ES7288-1CR40-0AA0 All versions, SIMATIC S7-200 SMART CPU CR60 6ES7288-1CR60-0AA0 All versions, SIMATIC S7-200 SMART CPU SR20 6ES7288-1SR20-0AA0 All versions, SIMATIC S7-200 SMART CPU SR20 6ES7288-1SR20-0AA1 All versions, SIMATI...

Siemens SIMATIC 安全漏洞

The S7-200 SMART series is a series of miniature programmable logic controllers that control a variety of small automation applications. A denial of service vulnerability exists in Siemens SIMATIC S7-200 SMART Devices due to a failure of an affected device to properly handle incorrectly structure...

CVE-2024-39561

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon flowd of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an attacker to send TCP packets with SYN/FIN or SYN/RST flags, bypassing the expected blocking of these packets. A TCP packet with SYN/F...

CVE-2024-39561 Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon flowd of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an attacker to send TCP packets with SYN/FIN or SYN/RST flags, bypassing the expected blocking of these packets. A TCP packet with SYN/F...

CVE-2024-39561 Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon flowd of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an attacker to send TCP packets with SYN/FIN or SYN/RST flags, bypassing the expected blocking of these packets. A TCP packet with SYN/F...

CVE-2024-39561

CVE-2024-39561 affects Juniper Junos OS on SRX4600/SRX5000 Series. The vulnerability stems from an improper check in the flow daemon (flowd) that can allow TCP packets with SYN/FIN or SYN/RST flags to bypass the intended block when no-syn-check and Express Path are enabled, causing such packets t...

CVE-2021-47587

In the Linux kernel, the following vulnerability has been resolved: net: systemport: Add global locking for descriptor lifecycle The descriptor list is a shared resource across all of the transmit queues, and the locking mechanism used today only protects concurrency across a given transmit queue...

CVE-2024-36856

RMQTT Broker 0.4.0 is vulnerable to Denial of Service DoS due to improper session resource management. An attacker can exhaust system memory and crash the daemon by establishing and maintaining a vast number of long-lived malicious publish/subscribe sessions...

CVE-2024-36856

RMQTT Broker 0.4.0 is vulnerable to Denial of Service DoS due to improper session resource management. An attacker can exhaust system memory and crash the daemon by establishing and maintaining a vast number of long-lived malicious publish/subscribe sessions...

CVE-2024-36856

RMQTT Broker 0.4.0 is vulnerable to Denial of Service DoS due to improper session resource management. An attacker can exhaust system memory and crash the daemon by establishing and maintaining a vast number of long-lived malicious publish/subscribe sessions...

CVE-2024-36856

RMQTT Broker 0.4.0 is vulnerable to Denial of Service DoS due to improper session resource management. An attacker can exhaust system memory and crash the daemon by establishing and maintaining a vast number of long-lived malicious publish/subscribe sessions...

CVE-2024-36856

CVE-2024-36856 affects RMQTT Broker 0.4.0, where remote attackers can cause a Denial of Service (daemon crash) via a large number of malicious packets. Several connected sources corroborate a network-based vector, delivering a DoS via crafted packets (e.g., a specific sequence of five TCP packets...

CVE-2024-36856

RMQTT Broker 0.4.0 is vulnerable to Denial of Service DoS due to improper session resource management. An attacker can exhaust system memory and crash the daemon by establishing and maintaining a vast number of long-lived malicious publish/subscribe sessions...

PT-2024-27181 · Unknown · Rmqtt Broker

Name of the Vulnerable Software and Affected Versions: RMQTT Broker version 0.4.0 Description: The issue allows remote attackers to cause a Denial of Service, resulting in a daemon crash, via a specific sequence of five TCP packets. Recommendations: For RMQTT Broker version 0.4.0, at the moment,...

CVE-2023-52729

TCPServer.cpp in SimpleNetwork through 29bc615 has an off-by-one error that causes a buffer overflow when trying to add '\0' to the end of long msg data. It can be exploited via crafted TCP packets...

CVE-2023-52729

The CVE-2023-52729 entry concerns SimpleNetwork’s TCPServer.cpp with an off-by-one bug that allows a buffer overflow when appending a null terminator to long messages. Affected version range: through 29bc615. Impact, as described in sources, is exposure to crafted TCP packets that can trigger the...