Gentoo Security Advisory GLSA 201510-03

Gentoo Linux Local Security Checks GLSA 201510-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

SUSE SLED11 / SLES11 Security Update : wireshark (SUSE-SU-2015:1098-1)

Wireshark was updated and fixes the following issues : CVE-2015-3811: The WCP dissector could crash while decompressing data. CVE-2015-3812: The X11 dissector could leak memory CVE-2015-3814: The IEEE 802.11 dissector could go into an infinite loop. Note that Tenable Network Security has extracte...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2015:1046-1)

Wireshark was updated to 1.10.14 to fix four security issues. The following vulnerabilities have been fixed : - CVE-2015-3811: The WCP dissector could crash while decompressing data. wnpa-sec-2015-14 - CVE-2015-3812: The X11 dissector could leak memory. wnpa-sec-2015-15 - CVE-2015-3813: The packe...

Wireshark Multiple Denial-of-Service Vulnerabilities-02 (Jun 2015) - Mac OS X

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wireshark Multiple Denial-of-Service Vulnerabilities-02 (Jun 2015) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-3814

The 1 dissecttfsrequest and 2 dissecttfsresponse functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a zero value as a length rather than an error condition, which allows remote attackers to cause a...

DEBIAN-CVE-2015-3814

The 1 dissecttfsrequest and 2 dissecttfsresponse functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a zero value as a length rather than an error condition, which allows remote attackers to cause a...

CVE-2015-3814

The CVE-2015-3814 issue affects the Wireshark IEEE 802.11 dissector. The affected code paths (epan/dissectors/packet-ieee80211.c) interpret a zero value as a length instead of an error, allowing remote attackers to trigger a denial-of-service through crafted packets that cause an infinite loop. Af...

openSUSE Security Update : Wireshark (openSUSE-2015-379)

Wireshark was updated to 1.12.5 to fix security issues and bugs. The following vulnerabilities have been fixed : - CVE-2015-3808, CVE-2015-3809: The LBMR dissector could go into an infinite loop. wnpa-sec-2015-12 - CVE-2015-3810: The WebSocket dissector could recurse excessively. wnpa-sec-2015-13...

wireshark-qt: denial of service

CVE-2015-3808 denial of service There is an infinite loop condition in dissectlbmrpser in epan/dissectors/packet-lbmr.c. It's possible for an attacker to set the the variable 'optionlen' to 0, causing the loop to never terminate. This issue is leading to excessive CPU resources consumption by...

KLA10586 Denial of service vulnerabilities in Wireshark

An unspecified vulnerabilities were found in Wireshark. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via a specially designed packet trace. Original advisories Wireshark security advisories Related products...

wireshark -- multiple vulnerabilities

Wireshark development team reports: The following vulnerabilities have been fixed. wnpa-sec-2015-12 The LBMR dissector could go into an infinite loop. Bug 11036 CVE-2015-3808, CVE-2015-3809 wnpa-sec-2015-13 The WebSocket dissector could recurse excessively. Bug 10989 CVE-2015-3810 wnpa-sec-2015-1...

Juniper NetScreen Firewall DNS lookup/Malformed IPv6 packet Denial of Service Vulnerability

Juniper NetScreen Firewall is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-3814

CVE-2014-3814 affects Juniper ScreenOS NetScreen Firewall devices (pre-6.3r17) with the internal DNS lookup client. A remote attacker can cause a denial of service (crash/reboot) by sending a sequence of malformed packets to the device IP, exploiting a DNS lookup handling flaw. Evidence in connec...

openSUSE Security Update : freetype2 (openSUSE-SU-2011:0361-1)

Specially crafted font files could crash applications that use freetype2 to render the fonts CVE-2010-3814, CVE-2010-3855. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update freetype2-4080. The...

CVE-2013-3814

Technical details about CVE-2013-3814 are not publicly available in the provided documents. The affected Oracle Retail Invoice Matching component is noted, but no root cause, version ranges, exploitation, or remediation are described here. Monitor for updates.

Cisco Unity Remote Administration Authentication Bypass (cisco-sa-20081008-unity)

According to its self-reported version number, the installation of Cisco Unity on the remote host may be affected by an authentication bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. Additionally,...

CVE-2012-3814

CVE-2012-3814 affects the Font Uploader WordPress plugin (version 1.2.4). The vulnerability is an unrestricted file upload in font-upload.php, enabling remote attackers to upload a PHP file with a .php.ttf extension and then access it under font-uploader/fonts, leading to arbitrary PHP code execu...

CVE-2012-3814

creationtimestamp| type| source ---|---|--- 2012-06-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18994...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 7399)

Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...