CVE-2015-2188

Wireshark vulnerability CVE-2015-2188 affects the WCP dissector (epan/dissectors/packet-wcp.c). The issue is that the data structure is not properly initialized, allowing a crafted packet (via decompression) to trigger an out-of-bounds read and crash the application, enabling a remote DoS. Affect...

KLA10518 Denial of service vulnerabilities in Wireshark

Integer overflows and other unspecified vulnerabilities were found in Wireshark. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via a specially designed packet. Original advisories Wireshark advisories Related...

CVE-2014-2188

...

CVE-2014-2188

CVE-2014-2188 is rejected and not used.

openSUSE Security Update : acroread (openSUSE-SU-2010:0573-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240, CVE-2010-2862. This update also incorporate the Adobe Flash Player update APSB10-16 for the bundled flash player parts CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0502-1)

Flash Player was updated to version 10.1.82.76 fixing several critical security issues. CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214, CVE2010-2215, CVE-2010-2216 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Ubuntu: Security Advisory (USN-2188-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : elfutils vulnerability (USN-2188-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2188-1 advisory. Florian Weimer discovered that the elfutils libdw library incorrectly handled malformed compressed debug sections in ELF files. If a user or automated system were...

Fedora Update for xen FEDORA-2014-2188

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2188

The CVE-2013-2188 vulnerability concerns a Red Hat patch to do_filp_open in fs/namei.c of the Linux kernel for RHEL 6, where failure to obtain write permissions is not handled correctly. This can allow local users to trigger a denial of service (system crash) by accessing a filesystem mounted rea...

RHEL 6 : kernel (RHSA-2013:0911)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0911 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A fla...

CVE-2012-2188

Vulnerability CVE-2012-2188 affects IBM Power Hardware Management Console (HMC) and Systems Director Management Console (SDMC). The root cause is improper restriction of the VIOS viosrvcmd command, enabling local users to gain privileges via vectors involving a $ or & character. Affected versions...

CVE-2011-2188

LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...

DEBIAN-CVE-2011-2188

LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...

CVE-2011-2188

Technical details for CVE-2011-2188 are not publicly provided in the connected documents. Monitor for updates.

CVE-2011-2188

LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...

Debian: Security Advisory (DSA-2188-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2188-1 : webkit - several vulnerabilities

Several vulnerabilities have been discovered in WebKit, a Web content engine library for GTK+. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1783 WebKit does not properly handle dynamic modification of a text node, which allows remote attackers to...

SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7132)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240 / CVE-2010-2862. This has been fixed. This update also incorporates the Adobe Flash Player update APSB10-16 for the bundled flash player parts. CVE-2010-0209 / CVE-2010-2188 / CVE-2010-2213 /...

SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3004 / 3005)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240 / CVE-2010-2862. This has been fixed. This update also incorporates the Adobe Flash Player update APSB10-16 for the bundled flash player parts. CVE-2010-0209 / CVE-2010-2188 / CVE-2010-2213 /...