PT-2023-18693 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access point versions affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services, potentially leading to unauthenticated remote code execution. This can be achieved by...

EulerOS 2.0 SP11 : net-snmp (EulerOS-SA-2023-1764)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a...

EulerOS 2.0 SP11 : net-snmp (EulerOS-SA-2023-1786)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a...

PT-2023-18688 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access points affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services. These vulnerabilities could lead to unauthenticated remote code execution by sending speciall...

CVE-2023-29552: Abusing the SLP Protocol to Launch Massive DDoS Amplification Attacks

On April 25, 2023, researchers at Bitsight and Curesec jointly discovered a high-severity vulnerability — tracked as CVE-2023-29552 — in the Service Location Protocol SLP, a legacy Internet protocol. What is SLP protocol? Service Location Protocol SLP is a network protocol designed to simplify th...

CVE-2023-29163

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Code injection

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-29163 BIG-IP UDP Profile vulnerability

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-29163

Summary: CVE-2023-29163 affects F5 BIG-IP’s UDP profile when Idle Timeout is set to Immediate or 0, causing the Traffic Management Microkernel (TMM) to terminate and potentially DoS the system. The issue is a data-plane vulnerability that disrupts traffic as TMM restarts; exploitation is remote a...

CVE-2023-29163 BIG-IP UDP Profile vulnerability

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

K20145107: BIG-IP UDP profile vulnerability CVE-2023-29163

Security Advisory Description When a UDP profile with Idle Timeout set to Immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2023-29163 Impact Traffic is disrupted while the TMM process restarts. This...

PT-2023-22180 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP affected versions not specified Description: The issue occurs when a UDP profile with an idle timeout set to immediate or the value 0 is configured on a virtual server. In this scenario, undisclosed traffic can cause the Traffic...

Denial Of Service (DoS)

dnsmasq is vulnerable to Denial of Service DoS. The vulnerability exists because of the size of the UDP packet exceeds the defaults size which allows an attacker to cause an application crash...

CVE-2022-33304

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet...

Null pointer dereference

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet...

CVE-2022-33304 NULL pointers dereference in Modem

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet...

CVE-2022-33304

CVE-2022-33304 affects the Modem component and is caused by a NULL pointer dereference during the pullup for received TCP/UDP packets, leading to a transient Denial of Service. The CVSS v3.1 vector indicates network attack, low complexity, no user interaction, with availability impact but no conf...

CVE-2022-33304 NULL pointers dereference in Modem

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet...

EulerOS Virtualization 2.9.1 : net-snmp (EulerOS-SA-2023-1644)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can...

EulerOS Virtualization 2.9.0 : net-snmp (EulerOS-SA-2023-1678)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can...