Advisory ROSA-SA-2024-2403

Software: vdsm 4.40.35.1 OS: ROSA Virtualization 2.1 packageevrstring: vdsm-4.40.35.1.rv3 CVE-ID: CVE-2022-0207 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A race condition has been detected in vdsm. Functionality to hide sensitive values in log files, which may cause values to be stored as plaintex...

Moderate Photon OS Security Update - PHSA-2024-5.0-0207

Updates of 'bluez' packages of Photon OS have been released...

Malicious code in wlwz-2312-0207 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b40158a53735d61d382c963139fc893eb4dbb159cedd4146190408b698d9537a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-195 Malicious code in wlwz-2312-0207 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b40158a53735d61d382c963139fc893eb4dbb159cedd4146190408b698d9537a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 8 / 9 : OpenShift Container Platform 4.14.9 (RHSA-2024:0207)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0207 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

RHSA-2024:0207

creationtimestamp| type| source ---|---|--- 2024-01-17 18:16:42+00:00| seen| https://t.me/ctinow/169387...

SUSE CVE-2024-0207

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-0207

creationtimestamp| type| source ---|---|--- 2024-01-03 09:26:21+00:00| seen| https://t.me/ctinow/162260 2024-01-04 01:32:59+00:00| seen| https://t.me/cibsecurity/74285 2024-01-09 23:17:20+00:00| seen| https://t.me/ctinow/165416 2024-01-23 09:56:25+00:00| seen| https://t.me/ctinow/171812...

CVE-2024-0207

CVE-2024-0207 affects Wireshark 4.2.0, where the HTTP3 dissector crashes, allowing denial of service via packet injection or crafted capture files. Evidence from multiple sources confirms the vulnerability in the HTTP3 parser with DoS impact (CVE-2024-0207). remediation: upgrade to Wireshark 4.2....

CVE-2024-0207 Out-of-bounds Read in Wireshark

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-0207

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-0207 Out-of-bounds Read in Wireshark

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

KLA62768 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in HTTP3 dissector can be exploited to cause denial of service. 2. Denial of service...

Wireshark 4.2.x < 4.2.1 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.2.1 advisory. - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service...

Wireshark 4.2.x < 4.2.1 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.2.1 advisory. - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packe...

Mageia: Security Advisory (MGASA-2023-0207)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-0207

creationtimestamp| type| source ---|---|--- 2023-04-22 07:37:34+00:00| seen| https://t.me/cibsecurity/62651...

Debian: Security Advisory (DLA-0018-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM SAN b-type Switches

Summary OpenSSL issues from March 2015 containing 12 CVE were disclosed. This bulletin addresses the vulnerabilities that have been referred to as Open SSL used by IBM SAN b-type Switches. Vulnerability Details CVEID: CVE-2015-0291 DESCRIPTION: OpenSSL is vulnerable to a denial of service. By...

Splunk Enterprise 8.1 < 8.1.13, 8.2.0 < 8.2.10, 9.0.0 < 9.0.4 (SVD-2023-0207)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0207 advisory. - In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup table...