SUSE-SU-2023:3252-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 3.6.15: - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.6.15.html Security fixes: - CVE-2023-0667: Fixed failure to validate MS-MMS packet length...

Amazon Linux AMI : wireshark (ALAS-2023-1785)

The version of wireshark installed on the remote host is prior to 1.8.10-25.24. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1785 advisory. Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in a...

Low: wireshark

Issue Overview: Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark...

Low: wireshark

Issue Overview: Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark...

OESA-2023-1372 wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

CVE-2023-0667

CVE-2023-0667 affects Wireshark MSMMS parsing in 4.0.5 and earlier. The vulnerability arises from failing to validate the MSMMS packet length, causing a heap-based buffer overflow and potential code execution in the Wireshark process. A fix is available; advisories indicate upgrading to Wireshark...

CVE-2023-0667 Wireshark MSMMS parsing buffer overflow

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark...

SUSE SLES12 Security Update : libX11 (SUSE-SU-2023:0667-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0667-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. File data...

K01369521: bind vulnerability CVE-2022-0667

Security Advisory Description When the vulnerability is triggered the BIND process will exit. BIND 9.18.0 CVE-2022-0667 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently supported releases for...

SUSE CVE-2022-0667

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...

CVE-2022-0667

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...

BELL-CVE-2022-0667 CVE-2022-0667 does not affect BellSoft software

Bulletin has no description...

CVE-2022-0667 Assertion failure on delayed DS lookup

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...

CVE-2022-0667

CVE-2022-0667 affects ISC BIND 9.18.0 where the recursive client backstop lifetime timer can trigger an assertion failure, causing BIND to terminate. This enables a remote denial-of-service and, potentially, cache poisoning. Upstream fixes are in 9.18.1 (and related patches).

Berkeley Internet Name Domain (BIND) affected by multiple vulnerabilities

THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here The Internet Systems Consortium ISC has published security upgrades to address several vulnerabilities in the widely used Berkeley Internet Name Domain BIND server software. An attacker could take advantage of some of these...

ISC BIND 9.18.0 < 9.18.1 Assertion Failure (CVE-2022-0667)

The version of ISC BIND installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0667 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

ISC BIND Multiple Vulnerabilities (CVE-2022-0635, CVE-2022-0667) - Linux

ISC BIND is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current bind Multiple Vulnerabilities (SSA:2022-076-01)

The version of bind installed on the remote host is prior to 9.11.37 / 9.18.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-076-01 advisory. - BIND 9.16.11 - 9.16.26, 9.17.0 - 9.18.0 and versions 9.16.11-S1 - 9.16.26-S1 of the BIND Supported Preview Edition...

ISC BIND Multiple Vulnerabilities (CVE-2022-0635, CVE-2022-0667) - Windows

ISC BIND is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/bind-9.18.1-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: An assertion cou...