oracle enterprise communications broker 3.1.0 vulnerabilities and exploits

(subscribe to this query)

A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a miss...

Dpdk Data Plane Development Kit Fedoraproject Fedora 32 Opensuse Leap 15.1 Oracle Enterprise Communications Broker 3.1.0 Oracle Enterprise Communications Broker 3.2.0

A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of s...

Dpdk Data Plane Development Kit Fedoraproject Fedora 32 Opensuse Leap 15.1 Oracle Enterprise Communications Broker 3.1.0 Oracle Enterprise Communications Broker 3.2.0

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.

Dpdk Data Plane Development Kit Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Fedoraproject Fedora 32 Opensuse Leap 15.1 Oracle Enterprise Communications Broker 3.1.0 Oracle Enterprise Communications Broker 3.2.0 Oracle Communications Session Border Controller

A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possibl...

Dpdk Data Plane Development Kit Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Fedoraproject Fedora 32 Opensuse Leap 15.1 Oracle Enterprise Communications Broker 3.1.0 Oracle Enterprise Communications Broker 3.2.0 Oracle Communications Session Border Controller

stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and previous versions, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentiall...

Gnu Glibc Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Virtualization Host 4.0 Oracle Enterprise Communications Broker 3.0.0 Oracle Enterprise Communications Broker 3.1.0 Oracle Communications Session Border Controller 8.1.0 Oracle Communications Session Border Controller 8.2.0 Oracle Communications Session Border Controller 8.0.0 Netapp Data Ontap Edge -Netapp Element Software Management -

In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. T...

Nghttp2 Nghttp2 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.1 Fedoraproject Fedora 31 Fedoraproject Fedora 33 Oracle Enterprise Communications Broker 3.1.0 Oracle Graalvm 19.3.2 Oracle Graalvm 20.1.0 Oracle Mysql Oracle Enterprise Communications Broker 3.2.0 Oracle Banking Extensibility Workbench 14.4.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Blockchain Platform Nodejs Node.js

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and...

1 Article

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consu...

1 Article

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook