CVE-2020-15898

In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic ex. UDP and not bidirectional traffic ex. TCP. This affects: EOS 7170 platforms version 4.21.4.1F and below releas...

CVE-2020-15898

In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic ex. UDP and not bidirectional traffic ex. TCP. This affects: EOS 7170 platforms version 4.21.4.1F and below releas...

CVE-2020-15898

CVE-2020-15898 affects Arista EOS: malformed packets can be forwarded across VLAN boundaries in one direction, exploitable by unidirectional traffic (e.g., UDP). Affected: EOS X-Series and 7170 platforms with specific 4.21.x–4.24.x trains (see advisory 56). Impact is VLAN-crossing DoS-like behavi...

CVE-2020-15898

In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic ex. UDP and not bidirectional traffic ex. TCP. This affects: EOS 7170 platforms version 4.21.4.1F and below releas...

Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks

Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller ADC devices that attackers are abusing to launch amplified distributed denial-of-service DDoS attacks against several targets. "An attacker or bots can overwhe...

Envoy has an unspecified vulnerability

Envoy is an open source distributed proxy server . A security vulnerability exists in versions prior to Envoy 1.16.1 that stems from incorrect handling of dropped and truncated datagrams, as evidenced by a UDP packet size greater than 1500 segmentation error. No details of the vulnerability are...

CVE-2020-35471

A NULL pointer dereference vulnerability was found in Envoy. During the handling of truncated or dropped UDP datagrams, this flaw allows an attacker to specify the length of the packet to be larger than 1500 bytes and cause the envoy proxy process to segfault, resulting in a denial of service. Th...

CVE-2020-35471

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

CVE-2020-35471

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

Design/Logic Flaw

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

CVE-2020-35471

Envoy prior to 1.16.1 is affected by CVE-2020-35471 due to mishandling dropped and truncated UDP datagrams, demonstrable as a segmentation fault when UDP packet size exceeds 1500. Publicly documented fixes indicate upgrading to a release containing the patch (e.g., OpenSUSE/SUSE advisories and OS...

CVE-2020-35471

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3764-1)

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-15436: Fixed a use after free vulnerability in fs/blockdev.c which could have allowed local users to gain privileges or cause a denial of service...

CVE-2020-24634

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI Aruba Networks AP Management protocol UDP port 8211 of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility...

CVE-2020-24633

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211 of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series...

Code injection

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI Aruba Networks AP Management protocol UDP port 8211 of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility...

CVE-2020-24633

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211 of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series...

CVE-2020-24633

CVE-2020-24633: Multiple buffer-overflow flaws in Aruba’s PAPI over UDP port 8211 allow unauthenticated remote code execution on ArubaOS devices. Affected are Aruba 9000 Gateway, Aruba 7000 Series Mobility Controllers, and Aruba 7200 Series Mobility Controllers with versions: 2.1.0.1, 2.2.0.0 and...

CVE-2020-24634

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI Aruba Networks AP Management protocol UDP port 8211 of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility...

CVE-2020-24634

The CVE-2020-24634 vulnerability affects ArubaOS/PAPI on Aruba AP management UDP port 8211 (Aruba 9000 Gateway, Aruba 7000 and 7200 series mobility controllers). A remote attacker can inject arbitrary commands by sending specially crafted packets. Affected versions include Aruba 9000 gateway, and...