Most recent entries from all

bdu:2019-04208

2026-10-02T12:08:45.040750+00:00

bdu:2019-04208

certfr-2019-avi-510 — De multiples vulnérabilités ont été découvertes dans Oracle Systems. Certaines d'entre elles permettent à un attaquant…

2026-10-02T12:08:45.040786+00:00

certfr-2019-avi-510

cnvd-2018-20536

2026-10-02T12:08:45.040805+00:00

cnvd-2018-20536

EUVD-2026-237842

2026-10-02T12:08:45.040818+00:00

EUVD-2026-237842

fkie_cve-2018-18066

2026-10-02T12:08:45.040830+00:00

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

GHSA-9mpr-24m6-767p

2026-10-02T12:08:45.040858+00:00

gsd-2018-18066

2026-10-02T12:08:45.040873+00:00

gsd-2018-18066

ICSA-23-234-01 — Hitachi Energy AFF66x

2026-10-02T12:08:45.040884+00:00

In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names DNS servers returned via gethostbyname, getaddrinfo, gethostbyaddr, and getnameinfo could lead to output of wrong hostnames (leading to domain hijacking) or injection into applications (leading to remote code execution, XSS, applications crashes, etc.). In other words, a validation step, which is expected in any stub resolver, does not occur. ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 could allow remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must rely on unauthenticated IPv4 time sources. There must be an off-path attacker who could query time from the victim's ntpd instance. ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 could allow an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address because transmissions are rescheduled even when a packet lacks a valid origin timestamp. TCP_SKB_CB(skb)->tcp_gso_segs value is subject to an integer overflow in the Linux kernel when handling TCP selective acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit. A vulnerability named "non-responsive delegation attack" (NRDelegation attack) has been discovered in vari…

RHSA-2020:1081 — Red Hat Security Advisory: net-snmp security and bug fix update

2026-10-02T12:08:45.040925+00:00

net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service

RHSA-2020:2539 — Red Hat Security Advisory: net-snmp security and bug fix update

2026-10-02T12:08:45.040944+00:00

net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service

Withdrawn: UBUNTU-CVE-2018-18066

2026-10-02T12:08:45.040959+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: net-snmp, Ubuntu:18.04:LTS: net-snmp

WID-SEC-W-2025-1692 — Net-SNMP: Schwachstelle ermöglicht Denial of Service

2026-10-02T12:08:45.040982+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Net-SNMP ausnutzen, um einen Denial of Service Angriff durchzuführen.