|
255491
|
7.5 |
HIGH
Network
|
freeradius
|
freeradius
|
An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of service.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-10981
|
2024-11-21 12:06 |
2017-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255492
|
7.5 |
HIGH
Network
|
freeradius
|
freeradius
|
An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-10980
|
2024-11-21 12:06 |
2017-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255493
|
9.8 |
CRITICAL
Network
|
freeradius
|
freeradius
|
An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary c…
|
CWE-787
Out-of-bounds Write
|
CVE-2017-10979
|
2024-11-21 12:06 |
2017-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255494
|
7.5 |
HIGH
Network
|
freeradius
debian
redhat
|
freeradius
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise_linux_ser…
|
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-10978
|
2024-11-21 12:06 |
2017-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255495
|
7.8 |
HIGH
Local
|
juniper
|
junos
|
An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This issue was found during internal product s…
|
CWE-91
Blind XPath Injection
|
CVE-2017-10603
|
2024-11-21 12:06 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255496
|
7.5 |
HIGH
Network
|
juniper
|
junos
|
On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through th…
|
CWE-20
Improper Input Validation
|
CVE-2017-10605
|
2024-11-21 12:06 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255497
|
5.3 |
MEDIUM
Network
|
juniper
|
junos
|
When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect password can trigger a lockout of the r…
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2017-10604
|
2024-11-21 12:06 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255498
|
7.8 |
HIGH
Local
|
juniper
|
junos
|
A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and access to Junos CLI, to execute code with root privileges. Affected releases are Jun…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-10602
|
2024-11-21 12:06 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255499
|
9.8 |
CRITICAL
Network
|
juniper
|
junos
|
A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without being prompted for a password while trying to login through console, ssh, ftp, …
|
CWE-287
Improper Authentication
|
CVE-2017-10601
|
2024-11-21 12:06 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255500
|
5.9 |
MEDIUM
Local
|
canonical
|
ubuntu-image
|
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the sam…
|
CWE-384
Session Fixation
|
CVE-2017-10600
|
2024-11-21 12:06 |
2017-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
