Lucene search
+L

7366 matches found

Vulnrichment
Vulnrichment
added 2024/03/19 7:50 p.m.34 views

CVE-2024-2169 Implementations of UDP application protocols are susceptible to network loops and denial of service

Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service DOS and/or abuse of resources...

7.2AI score0.05397EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/19 7:50 p.m.3341 views

CVE-2024-2169

CVE-2024-2169 describes a DoS by network loops via UDP in implementations of UDP application protocols. Connected sources show concrete details for MikroTik RouterOS (vulnerable: <6.49.12 and

7.5CVSS7.4AI score0.05397EPSS
SaveExploits0References3
CERT
CERT
added 2024/03/19 12:00 a.m.98 views

Implementations of UDP-based application protocols are vulnerable to network loops

Overview A novel traffic-loop vulnerability has been identified against certain implementations of UDP-based applications protocols. An unauthenticated attacker can use maliciously-crafted packets against a UDP-based vulnerable implementation of application protocols e.g., DNS, NTP, TFTP that can...

7.5CVSS7.4AI score0.32059EPSS
SaveExploits3References12
NVD
NVD
added 2024/03/18 1:15 p.m.25 views

CVE-2023-7250

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection...

5.3CVSS5.5AI score0.00932EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2024/03/18 1:15 p.m.367 views

CVE-2023-7250

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection...

5.3CVSS6.4AI score0.00932EPSS
SaveExploits0References7
CVE
CVE
added 2024/03/18 12:21 p.m.168 views

CVE-2023-7250

CVE-2023-7250 affects iperf/iperf3: a misbehaving client that sends less data than expected can cause the iperf3 server to hang waiting for the remainder, denying service to other connections. Affected projects and notes from connected sources confirm the vulnerability in iperf3 when used as a se...

5.3CVSS5.1AI score0.00932EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2024/03/18 12:21 p.m.29 views

CVE-2023-7250

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection...

5.3CVSS5.6AI score0.00932EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/03/15 3:40 p.m.36 views

CVE-2023-7250

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection...

5.3CVSS5.5AI score0.00932EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/13 5:15 p.m.12 views

CVE-2024-20319

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

4.3CVSS5.8AI score0.0025EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/13 5:15 p.m.40 views

CVE-2024-20319

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

4.3CVSS4.8AI score0.0025EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/13 5:15 p.m.23 views

Code injection

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

3.3CVSS7.3AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/13 4:47 p.m.94 views

CVE-2024-20319

Cisco IOS XR Software contains a UDP forwarding code vulnerability that can allow an unauthenticated, adjacent attacker to bypass management plane protection and reach the SNMP server when SNMP is used with management plane protection. The issue arises from incorrect UDP forwarding when handling ...

4.3CVSS4.8AI score0.0025EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/13 4:47 p.m.43 views

CVE-2024-20319

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

4.3CVSS5.2AI score0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/13 4:47 p.m.15 views

CVE-2024-20319

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

4.3CVSS7AI score0.0025EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/03/13 4:00 p.m.77 views

Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass Vulnerability

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

4.3CVSS4.8AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/13 12:00 a.m.11 views

PT-2024-2335 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the UDP forwarding code could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple...

4.3CVSS4.5AI score0.0025EPSS
SaveExploits0References6
OSV
OSV
added 2024/03/12 8:56 a.m.15 views

MAL-2024-1091 Malicious code in udp-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0339bd7712cdbec458d820fe33388f955c5fdd4fb38e14e3fad8b2f6f4313d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/03/12 8:56 a.m.7 views

Malicious code in udp-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0339bd7712cdbec458d820fe33388f955c5fdd4fb38e14e3fad8b2f6f4313d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:06 a.m.31 views

BIT-JENKINS-2020-2100

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848...

5.8CVSS5.6AI score0.03443EPSS
SaveExploits0References7
OSV
OSV
added 2024/03/06 10:59 a.m.26 views

BIT-ENVOY-2020-35471

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

7.5CVSS7.5AI score0.02364EPSS
SaveExploits1References4
Rows per page
Query Builder