Node.js 'path' Module Regular Expression Denial-of-Service Vulnerability - Mac OS X

Node.js is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js";...

Security Bulletin: Vulnerability in Apache Tomcat affects IBM Algo One - Core (CVE-2016-8745)

Summary IBM Algo One - Core was potentially vulnerable to a remote attacker's attempt to obtain sensitive information Advisory 7416. Vulnerability Details CVEID: CVE-2016-8745 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by the improper handling...

Security Bulletin: Vulnerability in IBM SDK, Java Technology Edition Quarterly CPU - Oct 2016 - Includes Oracle Oct 2016 CPU Vulnerabilities IBM Algorithmics Algo Risk Application (CVE-2016-5597)

Summary A flaw exists in the HttpURLConnection and HttpsURLConnection implementations when connecting via a proxy, which allows a man-in-the-middle attacker to access proxy username and password information. The fix corrects the flaw. Vulnerability Details CVE-2016-5597 Original release date:...

F5 Networks BIG-IP : tcpdump vulnerabilities (K39512927)

CVE-2016-7928 The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcompprint. CVE-2016-7929 The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader. CVE-2016-7930 The LLC/SNAP parser in tcpdump before 4.9.0 ha...

CVE-2017-11541

tcpdump 4.9.0 has a heap-based buffer over-read in the lldpprint function in print-lldp.c, related to util-print.c...

TCPDUMP 'sliplink_print' function buffer overflow vulnerability

tcpdump is a set of sniffing tools developed by the Tcpdump team that runs under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the 'sliplinkprint'...

TCPDUMP 'compressed_sl_print' Function Denial of Service Vulnerability

tcpdump is a set of sniffing tools developed by the Tcpdump team that runs under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A security vulnerability exists in the 'compressedslprint' functi...

CVE-2017-11543

tcpdump 4.9.0 has a buffer overflow in the sliplinkprint function in print-sl.c...

CVE-2017-11541

tcpdump 4.9.0 has a heap-based buffer over-read in the lldpprint function in print-lldp.c, related to util-print.c...

Heap overflow

tcpdump 4.9.0 has a heap-based buffer over-read in the lldpprint function in print-lldp.c, related to util-print.c...

CVE-2017-11542

tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1print function in print-pim.c...

CVE-2017-11542

tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1print function in print-pim.c...

CVE-2017-11541

tcpdump vulnerability CVE-2017-11541 affects tcpdump 4.9.0/

CVE-2017-11541

tcpdump 4.9.0 has a heap-based buffer over-read in the lldpprint function in print-lldp.c, related to util-print.c...

CVE-2017-11542

tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1print function in print-pim.c...

CVE-2017-11541

tcpdump 4.9.0 has a heap-based buffer over-read in the lldpprint function in print-lldp.c, related to util-print.c...

CVE-2017-11542

tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1print function in print-pim.c...

CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

Heap overflow

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...