CVE-2021-1251

HIGH Year: 2021
CVSS v3 Score
7.4
High
CVSS v2 Score
6.1
Medium
Weakness Type
CWE-119
View all →

Vulnerability Description

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Related Vulnerabilities

CVE-2015-8843

HIGH
CVSS:7.4(High)

The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges ...

CWE-1192015

CVE-2016-1963

HIGH
CVSS:7.4(High)

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a file during a FileReader API read operation.

CWE-1192016

CVE-2016-6516

HIGH
CVSS:7.4(High)

Race condition in the ioctl_file_dedupe_range function in fs/ioctl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (heap-based buffer overflow) or possibly gain privi...

CWE-1192016

CVE-2017-1000364

HIGH
CVSS:7.4(High)

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this aff...

CWE-1192017

CVE-2018-17470

HIGH
CVSS:7.4(High)

A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CWE-1192018

CVE-2021-0217

HIGH
CVSS:7.4(High)

A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running Juniper Networks Junos OS with DHCP local/relay server configured may lead to e...

CWE-1192021