SUSE-SU-2022:3683-1 Security update for libksba

This update for libksba fixes the following issues: - CVE-2022-3515: Fixed a possible overflow in the TLV parser bsc1204357...

SUSE-SU-2022:3681-1 Security update for libksba

This update for libksba fixes the following issues: - CVE-2022-3515: Fixed a possible overflow in the TLV parser bsc1204357...

Stack-based Buffer Overflow

libksba is vulnerable to stack-based buffer overflow. The vulnerability exists due to an overflow directly in the TLV parser which allows an attacker to execute remote codes...

CVE-2022-22224

An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause the periodic packet management daemon PPMD process to go into an infinite loop,...

Input validation

An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause the periodic packet management daemon PPMD process to go into an infinite loop,...

CVE-2022-22224 Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV

An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause the periodic packet management daemon PPMD process to go into an infinite loop,...

PT-2022-6680 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S9 Juniper Networks Junos OS versions 19.2 prior to 19.2R3-S5 Juniper Networks Junos OS versions 19.3 prior to 19.3R3-S3 Juniper Networks Junos OS versions 19.4 prior to 19.4R3-S9 Juniper...

Juniper Junos OS Vulnerability (JSA69874)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69874 advisory. - An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an...

CVE-2022-3354 Open5GS UDP Packet ogs-tlv-msg.c denial of service

A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and ma...

CVE-2021-33317

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an...

CVE-2021-33315

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of PortID TLV, by sending a crafted lldp packet to the device, integer...

Null pointer dereference

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an...

Integer overflow

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of PortID TLV, by sending a crafted lldp packet to the device, integer...

CVE-2022-22196

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service DoS. The rpd CPU spikes to 100%...

CVE-2022-22196

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service DoS. The rpd CPU spikes to 100%...

Design/Logic Flaw

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service DoS. The rpd CPU spikes to 100%...

CVE-2022-22196 Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service DoS. The rpd CPU spikes to 100%...

CVE-2022-22196

CVE-2022-22196 affects Juniper Junos OS and Junos OS Evolved, in Routing Protocol Daemon (rpd). An adjacent, unauthenticated attacker with an ISIS adjacency can cause DoS by sending a malformed ISIS TLV, causing rpd CPU to spike to 100% and disrupt routing updates. Affected versions are: Junos OS...

CVE-2022-22196

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service DoS. The rpd CPU spikes to 100%...

FRRouting FRR 缓冲区错误漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR prior to 8.1.0 that stems from incorrectly checking the input packet length in isisd/isistlvs.c. The vulnerability is caused by the following...