Debian DLA-2967-1 : wireshark - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2967 advisory. Multiple security vulnerabilities have been discovered in Wireshark, a network traffic analyzer. An attacker could cause a denial of service infinite loop or...

Security fix for the ALT Linux 9 package wireshark version 3.6.2-alt1

3.6.2-alt1 built March 29, 2022 Anton Farygin in task 295752 Feb. 21, 2022 Anton Farygin - 3.6.2 Fixes: CVE-2022-0586, CVE-2022-0585, CVE-2022-0583, CVE-2022-0582, CVE-2022-0581...

Wireshark 3.6.x < 3.6.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.2 advisory. - Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial...

Wireshark 3.6.x < 3.6.2 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.2 advisory. - Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of servi...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2022:0722-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0722-1 advisory. - Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service...

openSUSE 15 Security Update : wireshark (openSUSE-SU-2022:0722-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0722-1 advisory. - Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or...

openSUSE: Security Advisory for wireshark (openSUSE-SU-2022:0722-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:0722-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 3.6.2: - CVE-2022-0586: RTMPT dissector infinite loop bsc1195866 - CVE-2022-0585: Large loops in multiple dissectors bsc1195867 - CVE-2022-0583: PVFS dissector crash bsc1195868 - CVE-2022-0582: CSN.1 dissector crash...

OPENSUSE-SU-2022:0722-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 3.6.2: - CVE-2022-0586: RTMPT dissector infinite loop bsc1195866 - CVE-2022-0585: Large loops in multiple dissectors bsc1195867 - CVE-2022-0583: PVFS dissector crash bsc1195868 - CVE-2022-0582: CSN.1 dissector crash...

Security fix for the ALT Linux 10 package wireshark version 3.6.2-alt1

3.6.2-alt1 built Feb. 28, 2022 Anton Farygin in task 295750 Feb. 21, 2022 Anton Farygin - 3.6.2 Fixes: CVE-2022-0586, CVE-2022-0585, CVE-2022-0583, CVE-2022-0582, CVE-2022-0581...

CVE-2022-0583

Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...

CVE-2022-0583

creationtimestamp| type| source ---|---|--- 2022-02-15 00:33:09+00:00| seen| https://t.me/cibsecurity/37456...

CVE-2022-0583

Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...

CVE-2022-0583

Wireshark CVE-2022-0583 is a crash in the PVFS protocol dissector that can cause a denial of service via crafted captures or packet injection in Wireshark versions 3.6.0–3.6.1 and 3.4.0–3.4.11. The issue has been addressed in multiple vendor advisories with fixes in newer packages (e.g., Debian 3...

Mageia: Security Advisory (MGASA-2014-0448)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-0583

creationtimestamp| type| source ---|---|--- 2021-10-11 20:24:38+00:00| seen| https://t.me/cibsecurity/30347...

CVE-2021-0583

In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2021-0583

CVE-2021-0583 affects Android (9/10) and relates to the BluetoothPairingDialog onCreate, enabling a tapjacking/overlay scenario that could lead to local elevation of privilege. According to Red Hat and NVD entries, exploitation requires user interaction (UI: Required) and local access, with a hig...

SUSE: Security Advisory (SUSE-SU-2021:0583-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0583

Improper access control in the subsystem for IntelR Smart Sound Technology may allow an authenticated user to potentially enable escalation of privilege via local access. This affects Intel® Smart Sound Technology before versions: 10th Generation Intel® Core™ i7 Processors, version 3431 and 8th...