UBUNTU-CVE-2018-9272

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak...

Memory corruption

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak...

UBUNTU-CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns...

UBUNTU-CVE-2018-9270

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak...

UBUNTU-CVE-2018-9262

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...

UBUNTU-CVE-2018-9274

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failuremessage.c has a memory leak...

UBUNTU-CVE-2018-9273

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak...

Wireshark NBAP Parser Heap Buffer Overflow Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.NBAP dissector is one of the Base Station Application Partial Protocol parsers. ...

Wireshark Denial of Service Vulnerability (CNVD-2018-07439)

Wireshark formerly known as Ethereal is a set of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.IEEE 802.15.4 parser is one of the IEEE 802.15.4 standard parser. A security...

Wireshark epan/oids.c file memory leak vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the epan/oids.c file in Wireshark versions 2.4.0...

Wireshark Kerberos Parser Denial of Service Vulnerability

Wireshark formerly Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.Kerberos dissector is one of the Kerberos network authentication protocol parsers. A...

Wireshark epan/dissectors/packet-h223.c file memory leak vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the epan/dissectors/packet-h223.c file in Wireshark...

Wireshark Denial of Service Vulnerability (CNVD-2018-07440)

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.VLAN dissector is one of the virtual LAN parsers. A security vulnerability exist...

Wireshark epan/dissectors/packet-lapd.c file memory leak vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the epan/dissectors/packet-lapd.c file in Wireshark...

Fedora 27 : 1:wireshark (2018-cdf3f8e8b0)

Removing dependency on wireshark metapackage from wireshark-cli ---- Added wireshark-qt to wireshark metapackage ---- - New version 2.4.5 - Contains fixes for CVE-2018-7419, CVE-2018-7418, CVE-2018-7417, CVE-2018-7420, CVE-2018-7320, CVE-2018-7336, CVE-2018-7337, CVE-2018-7334, CVE-2018-7335,...

PT-2018-18148 · Openvpn +3 · Openvpn +3

Name of the Vulnerable Software and Affected Versions: OpenVPN versions through 2.4.5 Description: A cross-protocol scripting issue was discovered in the management interface of OpenVPN. When this interface is enabled over TCP without a password and no other clients are connected, attackers can...

Security fix for the ALT Linux 9 package wireshark version 2.4.5-alt1

Feb. 26, 2018 Anton Farygin 2.4.5-alt1 - 2.4.5 - fixes: wnpa-sec-2018-05 The IEEE 802.11 dissector could crash. CVE-2018-7335 wnpa-sec-2018-06 Multiple dissectors could go into large infinite loops. All ASN.1 BER dissectors, along with the DICOM, DMP, LLTD, OpenFlow, RELOAD, RPCoRDMA, RPKI-Router...

PT-2017-5069 · Apache · Apache Cxf

Name of the Vulnerable Software and Affected Versions: Apache CXF versions 2.4.5 through 2.5.1 Description: The issue allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request, specifically exploiting the WS-SP UsernameToken policy...

[SECURITY] Fedora 24 Update: knot-2.4.5-1.fc24

Knot DNS is a high-performance authoritative DNS server implementation...

Knot DNS Server Security Bypass Vulnerability (Jun 2017)

A flaw was found in the way Knot handled TSIG authentication for dynamic updates. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...