23 matches found
Malicious code in elderberry-vpp-project (npm)
The package elderberry-vpp-project was found to contain malicious code. --- Credit: OpenSSF source...
EUVD-2022-49206
Malicious code in bioql PyPI...
CVE-2022-46397
FP.io VPP Vector Packet Processor 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode...
Citrix Endpoint Management: Policies Guide
Introduction Citrix XenMobile policies play a pivotal role in shaping how organizations interact with and manage their device ecosystems. By creating and enforcing specific policies, administrators can tailor the behaviour of devices to meet the unique needs of their business environments. Overvi...
CVE-2023-20051
A vulnerability in the Vector Packet Processor VPP of Cisco Packet Data Network Gateway PGW could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker...
Design/Logic Flaw
A vulnerability in the Vector Packet Processor VPP of Cisco Packet Data Network Gateway PGW could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker...
Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability
A vulnerability in the Vector Packet Processor VPP of Cisco Packet Data Network Gateway PGW could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker...
CVE-2023-20051: Uncontrolled Resource Consumption
A vulnerability in the Vector Packet Processor VPP of Cisco Packet Data Network Gateway PGW could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker...
CVE-2023-20051
Overview: CVE-2023-20051 affects the Vector Packet Processor (VPP) in Cisco’s Packet Data Network Gateway (PGW). Vulnerability: An unauthenticated, remote attacker can stop ICMP traffic from being processed over an IPsec connection by sending a malformed ESP over IPsec, causing a denial of servic...
CVE-2022-46397
FP.io VPP Vector Packet Processor 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode...
Code injection
FP.io VPP Vector Packet Processor 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode...
CVE-2022-46397
FP.io VPP Vector Packet Processor 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode...
CVE-2022-46397
FP.io VPP Vector Packet Processor 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode...
CVE-2022-46397
FP.io VPP Vector Packet Processor 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode...
CVE-2022-46397: Generation of Predictable IV with CBC Mode
FP.io VPP Vector Packet Processor 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode...
FDio VPP security vulnerabilities
FDio VPP is a fast, scalable Layer 2-4 multiplatform networking stack from FDio. A security vulnerability exists in FDio VPP that stems from the use of CBC mode to generate predictable IVs.The following products and versions are affected:FP.io VPP versions 22.10, 22.06, 22.02, 21.10, 21.06, 21.01...
CVE-2022-46397
CVE-2022-46397 affects FP.io VPP (Vector Packet Processor) versions 19.04 through 22.10. The issue is the generation of a predictable IV when using CBC mode, which is the underlying root cause. Impact described in sources points to high confidentiality impact with no explicit effects on integrity...
Renewing the VPP token in Citrix Endpoint Management and XenMobile
This article guides users through the process of renewing the VPP token in Citrix Endpoint Management and XenMobile. The workflow remains consistent for both on-premises and cloud platforms...
Deployment of Secure Hub is failing -"VPP internal Error"
Deployment of Secure Hub will fail with the error message "Sending installation commandCitrix Secure Hub-VPP internal" Device Logs will show below errors 2017-06-23T09:20:17.478+1000 | | ERROR | pool-10-thread-1 | com.citrix.ios.vpp.wsclient.request.VPPRequest | Apple feedback: The sToken has bee...