Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
a, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the context process. Was ZDI-CAN-5428. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-376 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9979 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.328Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Texture Continuation objects in U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can lever
validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5429. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-377 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9980 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.361Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with oth
a, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5430. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-378
CVE ID: CVE-2018-9981 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.409Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-824 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZD
cessing it. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5431. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-379
CVE ID: CVE-2018-9982 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.338Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the Texture Width in U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerabi
-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5483. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-380
CVE ID: CVE-2018-9983 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.270Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction
a, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the context process. Was ZDI-CAN-5494. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-381
CVE ID: CVE-2018-9984 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.335Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Texture Image Channels objects in U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can lev
er validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5495. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-382
CVE ID: CVE-2018-9985 State: PUBLISHED Published: 2018-04-10T18:00:00 Last Updated: 2024-08-05T07:24:56.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/learnsec6/test/issues/1
CVE ID: CVE-2018-9986 State: PUBLISHED Published: 2018-04-18T08:00:00 Last Updated: 2024-08-05T07:24:56.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2018/04/12/zulip-1-7-2-released/
CVE ID: CVE-2018-9987 State: PUBLISHED Published: 2018-04-18T08:00:00 Last Updated: 2024-08-05T07:24:56.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2018/04/12/zulip-1-7-2-released/
CVE ID: CVE-2018-9988 State: PUBLISHED Published: 2018-04-10T19:00:00 Last Updated: 2024-08-05T07:24:56.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html - https://github.com/ARMmbed/mbedtls/commit/a1098f81c252b317ad34ea978aea2bc47760b215 - https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released - https://github.com/ARMmbed/mbedtls/commit/027f84c69f4ef30c0693832a6c
/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released - https://github.com/ARMmbed/mbedtls/commit/027f84c69f4ef30c0693832a6c396ef19e563ca1 - https://lists.debian.org/debian-lts-announce/2021/11/msg00021.html
CVE ID: CVE-2018-9989 State: PUBLISHED Published: 2018-04-10T19:00:00 Last Updated: 2024-08-05T07:32:00.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html - https://github.com/ARMmbed/mbedtls/commit/5224a7544c95552553e2e6be0b4a789956a6464e - https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released - https://github.com/ARMmbed/mbedtls/commit/740b218386083dc708ce98ccc94a63
eases/mbedtls-2.8.0-2.7.2-and-2.1.11-released - https://github.com/ARMmbed/mbedtls/commit/740b218386083dc708ce98ccc94a63a95cd5629e - https://lists.debian.org/debian-lts-announce/2021/11/msg00021.html
CVE ID: CVE-2018-9990 State: PUBLISHED Published: 2018-04-18T08:00:00 Last Updated: 2024-08-05T07:32:00.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2018/04/12/zulip-1-7-2-released/
CVE ID: CVE-2018-9991 State: PUBLISHED Published: 2018-04-11T06:00:00 Last Updated: 2024-08-05T07:32:00.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/prafagr/98e625d2da82c5b9a7d75e6c3e947a63
CVE ID: CVE-2018-9992 State: PUBLISHED Published: 2018-04-11T06:00:00 Last Updated: 2024-08-05T07:32:00.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/browse/ screen. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/priyanksethi/48cce2fc4257213c8aca91e3c82a4ad3
CVE ID: CVE-2018-9993 State: PUBLISHED Published: 2018-04-10T21:00:00Z Last Updated: 2024-09-17T02:06:02.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a news center page). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/yunucms/yunucms.md
CVE ID: CVE-2018-9994 State: REJECTED Published: 2018-06-04T06:00:00 Last Updated: 2018-06-04T05:57:01 Description: No description available.
CVE ID: CVE-2018-9995 State: PUBLISHED Published: 2018-04-10T22:00:00 Last Updated: 2024-08-05T07:32:01.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response. Additional Analyst Notes: - CVE Program Container: References: - https://www.bleepingcomputer.com/news/security/ne
onse. Additional Analyst Notes: - CVE Program Container: References: - https://www.bleepingcomputer.com/news/security/new-hacking-tool-lets-users-access-a-bunch-of-dvrs-and-their-video-feeds/ - https://www.exploit-db.com/exploits/44577/ - http://misteralfa-hack.blogspot.cl/2018/04/tbk-vision-dvr-login-bypass.html - http://misteralfa-hack.blogspot.cl/2018/04/update-dvr-login-bypass-cve-2018-9995.html
CVE ID: CVE-2018-9996 State: PUBLISHED Published: 2018-04-10T22:00:00 Last Updated: 2024-08-05T07:32:00.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85304 - http://www.securityfocus.com/bid/103733
CVE ID: CVE-2018-9997 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T07:32:00.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev28 allows remote attackers to inject arbitrary web script or HTML via the data-target attribute in an HTML page with data-toggle gadgets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041213 - http://seclists.org/fulldisclosure/2018/Jul/12 - http://packetstormsecurity.com/files/154127/Open-Xch
r.com/id/1041213 - http://seclists.org/fulldisclosure/2018/Jul/12 - http://packetstormsecurity.com/files/154127/Open-Xchange-OX-Guard-Cross-Site-Scripting-Signature-Validation.html
CVE ID: CVE-2018-9998 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T07:32:00.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4-rev28 include folder names in API error responses, which allows remote attackers to obtain sensitive information via the folder parameter in an "all" action to api/tasks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041213 - http://seclists.org/fulldisclosure/2018/Jul/12
CVE ID: CVE-2018-9999 State: PUBLISHED Published: 2018-04-18T08:00:00 Last Updated: 2024-08-05T07:32:00.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2018/04/12/zulip-1-7-2-released/
CVE ID: CVE-2019-0001 State: PUBLISHED Published: 2019-01-15T21:00:00Z Last Updated: 2024-09-17T03:43:58.115Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-674 Description: Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon (bbe-smgd), and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result in an extended denial of service condition for the device. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-
ial of service condition for the device. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S1; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S1; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10900 - http://www.securityfocus.com/bid/106541 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMKFSHPMOZL7MDWU5RYOTIBTRWSZ4Z6X/ - https://lists.fedoraproject.org/archives/list/package-announce%40li
ject.org/message/RMKFSHPMOZL7MDWU5RYOTIBTRWSZ4Z6X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7CPKBW4QZ4VIY4UXIUVUSHRJ4R2FROE/
CVE ID: CVE-2019-0002 State: PUBLISHED Published: 2019-01-15T21:00:00Z Last Updated: 2024-09-16T17:44:13.859Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-794 Description: On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.
and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2. This issue affect both IPv4 and IPv6 firewall filter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106669 - https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-pfe-filter.html - https://kb.juniper.net/JSA10901
CVE ID: CVE-2019-0003 State: PUBLISHED Published: 2019-01-15T21:00:00Z Last Updated: 2024-09-17T00:10:42.065Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-617 Description: When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon (rpd) process to crash with a core file being generated. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 v
er Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1 versions prior to 15.1R3; 15.1F versions prior to 15.1F3; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10902 - http://www.securityfocus.com/bid/106544
CVE ID: CVE-2019-0004 State: PUBLISHED Published: 2019-01-15T21:00:00Z Last Updated: 2024-09-16T16:17:26.216Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Juniper ATP Problem Types: CWE-532 Description: On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue affects Juniper ATP 5.0 versions prior to 5.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10918
CVE ID: CVE-2019-0005 State: PUBLISHED Published: 2019-01-15T21:00:00 Last Updated: 2024-08-04T17:37:07.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS on EX and QFX series;: 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1R7; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 series; 15.1X53 versions prior to 15.1X53-D591 on
to 15.1R7; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 series; 15.1X53 versions prior to 15.1X53-D591 on EX2300/EX3400 series; 16.1 versions prior to 16.1R7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106665 - https://kb.juniper.net/JSA10905
CVE ID: CVE-2019-0006 State: PUBLISHED Published: 2019-01-15T21:00:00Z Last Updated: 2024-09-16T19:24:57.018Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-908 Description: A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. This issue only occurs when the crafted packet it destined to the device. Affected releases are Juniper Networks
cution. This issue only occurs when the crafted packet it destined to the device. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D47 on EX and QFX Virtual Chassis Platforms; 15.1 versions prior to 15.1R7-S3 all Virtual Chassis Platforms 15.1X53 versions prior to 15.1X53-D50 on EX and QFX Virtual Chassis Platforms. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106666 - https://kb.juniper.net/JSA10906
CVE ID: CVE-2019-0007 State: PUBLISHED Published: 2019-01-15T21:00:00Z Last Updated: 2024-09-16T16:22:59.350Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Improper Enforcement of Message Integrity During Transmission in a Communication Channel Description: The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during internal product security testing. Affected releases are Jun
as their base method of attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F5 on vMX Series. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10903 - http://www.securityfocus.com/bid/106564
CVE ID: CVE-2019-0008 State: PUBLISHED Published: 2019-04-10T20:13:50.973967Z Last Updated: 2024-09-16T16:17:56.196Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-121 Description: A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series, EX4300, EX4600 are: 14.1X53; 15.1X53 versions prior to 1