漏洞 - 第570页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-1980

Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-1977

Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-1969

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdrag ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-1968

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdrag ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-1967

Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-1966

Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-1959

Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-1936

Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-1932

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-1917

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-1913

Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdrag ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：17 | 回复：0
CVE漏洞

CVE-2020-11303

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snap ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-3455

Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions = 2.4.0, = 2.5.0 contain Use After Free (CWE-416). For more information, see https://github.com/zephyrproject- ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-3454

Truncated L2CAP K-frame causes assertion failure. Zephyr versions = 2.4.0, = v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Reachable Assertion (CWE-617). For more infor ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-41150

Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The tough library, prior to 0.12.0, does not properly sanitize delegated role names w ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-31386

A Protection Mechanism Failure vulnerability in the J-Web HTTP service of Juniper Networks Junos OS allows a remote unauthenticated attacker to perform Person-in-the-Middle (PitM) attacks against the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-31385

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in J-Web of Juniper Networks Junos OS allows any low-privileged authenticated attacker to elevat ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-31384

Due to a Missing Authorization weakness and Insufficient Granularity of Access Control in a specific device configuration, a vulnerability exists in Juniper Networks Junos OS on SRX Series whereby an ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-31383

In Point to MultiPoint (P2MP) scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy write operation combined with a Stack-based B ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-31382

On PTX1000 System, PTX10002-60C System, after upgrading to an affected release, a Race Condition vulnerability between the chassis daemon (chassisd) and firewall process (dfwd) of Juniper Networks Jun ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：6 | 回复：0
CVE漏洞

CVE-2021-31381

A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：6 | 回复：0
CVE漏洞

CVE-2021-31380

A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclos ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-31379

An Incorrect Behavior Order vulnerability in the MAP-E automatic tunneling mechanism of Juniper Networks Junos OS allows an attacker to send certain malformed IPv4 or IPv6 packets to cause a Denial of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-31378

In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.), on Juniper Networks Junos OS devices where RADIUS servers are configured for managing s ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-31377

An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem of Junos OS allows a local authenticated attacker to cause routing process daemon (RPD) to cr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-31376

An Improper Input Validation vulnerability in Packet Forwarding Engine manager (FXPC) process of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) by sending specific DHC ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：7 | 回复：0
CVE漏洞

CVE-2021-31375

An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-31374

On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (RPD) crash and restart, causing a Denial ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-31373

A persistent Cross-Site Scripting (XSS) vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-31372

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the target device. This issue a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-31371

Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an QFX5000 Series swit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-31370

An Incomplete List of Disallowed Inputs vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows an adjacent unauthenticated attacker whi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-31369

On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated network attacker to cause a part ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-31368

An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks JUNOS OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unrespons ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-31367

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows an adjacent attacker to cause a Denial of Ser ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-31366

An Unchecked Return Value vulnerability in the authd (authentication daemon) of Juniper Networks Junos OS on MX Series configured for subscriber management / BBE allows an adjacent attacker to cause a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-31365

An Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on EX2300, EX3400 and EX4300 Series platforms allows an adjacent attacker sending a stream of layer 2 frames will trigge ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-31364

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-31363

In an MPLS P2MP environment a Loop with Unreachable Exit Condition vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjace ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：31 | 回复：0