Advisory ROSA-SA-2024-2390

Software: wireshark 4.0.10 OS: ROSA-CHROME packageevrstring: wireshark-4.0.10-1.src.rpm CVE-ID: CVE-2023-2858 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: NetScaler file analyzer failure in Wireshark allows a denial of service via a created capture file. CVE-STATUS: Fixed CVE-REV: To close, run the...

CVE-2024-2906

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

CVE-2024-2906 WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

CVE-2024-2906

CVE-2024-2906 describes a Missing Authorization vulnerability in SoftLab Radio Player (WordPress Radio Player plugin). Publicly available refs corroborate the issue affecting Radio Player versions up to 2.0.73. The Red Hat security entry mirrors the description and notes the affected product as R...

CVE-2024-2906 WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

WordPress Radio Player Plugin <= 2.0.73 is vulnerable to Broken Access Control

Software Radio Player Type Plugin Vulnerable versions = 2.0.73 Fixed in 2.0.74 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-2906 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 925ae43e1043 Credits Elliot Required privilege...

Malicious code in wlwz-2312-2906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e46092997b47ebc6f98019c4cef41b36cf29e0fcaaf45958cbfe97fb0042204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-2906

creationtimestamp| type| source ---|---|--- 2024-01-09 14:46:41+00:00| seen| https://t.me/ctinow/165028...

Fedora 39 : wireshark (2023-b57a9be8a8)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b57a9be8a8 advisory. New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513. Tenable has extracted the preceding description...

CBL Mariner 2.0 Security Update: wireshark (CVE-2023-2906)

The version of wireshark installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2906 advisory. - Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark version...

SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2023:3778-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3778-1 advisory. - Wireshark update to v3.6.16. - CVE-2023-4512: Fixed a bug in CBOR dissector which could lead t...

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-348)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-348 advisory. Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of servi...

Medium: wireshark

Issue Overview: Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. CVE-2023-2906 BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and...

Fedora: Security Advisory (FEDORA-2023-b57a9be8a8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for wireshark (FEDORA-2023-920a3ab4ee)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : wireshark (2023-abc9ca1e7e)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-abc9ca1e7e advisory. New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513. Tenable has extracted the preceding description...

Fedora 37 : wireshark (2023-920a3ab4ee)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-920a3ab4ee advisory. New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513. Tenable has extracted the preceding description...

CVE-2023-2906

Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack...

CVE-2023-2906

Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack...

CVE-2023-2906

Wireshark CVE-2023-2906 is a CP2179 length validation failure leading to a divide-by-zero DoS. Affected: Wireshark 2.0.0–4.0.7. Root cause: attacker-crafted CP2179 packet length not properly validated. Impact: denial of service via crashes or resource exhaustion as described in multiple sources. ...