Archive
October 2021
Vulnerabilities first published in this month (UTC), newest first.
346 results · Clear filters · Feed
-
High 7.5
Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snap…
-
High 8.4
Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, …
-
High 8.4
Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapd…
-
High 7.5
Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beaco…
-
High 7.5
Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdr…
-
High 8.4
Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Sn…
-
High 8.4
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snap…
-
High 8.4
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snap…
-
High 8.4
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdrag…
-
High 8.4
Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdra…
-
High 8.4
Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compu…
-
High 8.4
Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapd…
-
High 8.4
Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon …
-
High 8.4
Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto…
-
High 8.4
Possible buffer overflow due to improper handling of negative data length while processing write request in VR service …
-
High 7.5
Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon C…
-
High 7.5
Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC resp…
-
High 7.8
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon…
-
High 8.4
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Sna…
-
High 7.5
Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Com…
-
High 8.4
Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with…
-
High 8.4
Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Sna…
-
High 8.4
Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto,…
-
High 8.6
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon …
-
High 8.2
Improper sanitization of delegated role names in tough
Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The tough library, prior to 0.12.0, does not properly sanitize delegated role names when caching a repository, or when loading a repository from…
-
High 8.8
Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in J-Web of Juniper Networks Junos OS allows any low-privileged authenticated attacker to elevate their privileges to root. This issue affects: Juniper Networks Ju…
-
High 7.2
Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service
Due to a Missing Authorization weakness and Insufficient Granularity of Access Control in a specific device configuration, a vulnerability exists in Juniper Networks Junos OS on SRX Series whereby an attacker who attempts to access J-Web administrative interf…
-
High 7.5
Junos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.
In Point to MultiPoint (P2MP) scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy write operation combined with a Stack-based Buffer Overflow on certain specific packets processed by the…
-
High 7.5
Junos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.
An Incorrect Behavior Order vulnerability in the MAP-E automatic tunneling mechanism of Juniper Networks Junos OS allows an attacker to send certain malformed IPv4 or IPv6 packets to cause a Denial of Service (DoS) to the PFE on the device which is disabled a…
-
High 7.5
Junos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packets
An Improper Input Validation vulnerability in Packet Forwarding Engine manager (FXPC) process of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) by sending specific DHCPv6 packets to the device and crashing the FXPC service. Co…
-
High 7.2
Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed
An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), allows an attacker to send a specific BGP update which may c…
-
High 7.5
Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.
On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (RPD) crash and restart, causing a Denial of Service (DoS). Continued receipt and processing of this …
-
High 8.0
Junos OS: SRX Series: Persistent XSS vulnerability in J-Web
A persistent Cross-Site Scripting (XSS) vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive d…
-
High 8.8
Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.
An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the target device. This issue affects: Juniper Networks Junos OS All versions prior to 18.…
-
High 7.5
Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic
An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks JUNOS OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band manage…
-
High 7.1
Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing
An improper privilege management vulnerability in the Juniper Networks Junos OS and Junos OS Evolved command-line interpreter (CLI) allows a low-privileged user to overwrite local files as root, possibly leading to a system integrity issue or Denial of Servic…
-
High 7.8
Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability
A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to cause the Juniper DHCP daemon (jdhcpd) process to crash, resulting in a Denial of Service (DoS), or execute arbitrary commands …
-
High 7.8
Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script
A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the…
-
High 7.8
Junos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script
A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of …
-
High 7.8
Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts
A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the curr…