Fedora: Security Advisory for tcpreplay (FEDORA-2024-b3b2a95168)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : tcpreplay (2024-b3b2a95168)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-b3b2a95168 advisory. Patch CVE-2023-4256 and CVE-2023-43279 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 39 : tcpreplay (2024-ec1fba69c2)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ec1fba69c2 advisory. Patch CVE-2023-4256 and CVE-2023-43279 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2023-4256

creationtimestamp| type| source ---|---|--- 2023-12-21 17:21:43+00:00| seen| https://t.me/ctinow/157836 2024-01-03 08:16:45+00:00| seen| https://t.me/ctinow/162239 2024-01-13 06:51:23+00:00| seen| https://t.me/ctinow/167697...

CVE-2023-4256

CVE-2023-4256 affects tcpreplay (tcprewrite component). A double-free vulnerability in tcpedit_dlt_cleanup() within plugins/dlt_plugins.c can be triggered by a crafted file, enabling a local DoS. Affected advisories/documentation in connected sources include openSUSE openSUSE-SU-2025-20119-1 (men...

CVE-2023-4256

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpeditdltcleanup function within plugins/dltplugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a...

CVE-2023-4256 Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpeditdltcleanup function within plugins/dltplugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a...

Rocky Linux 8 : graphviz (RLSA-2021:4256)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4256 advisory. - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial o...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

CVE-2022-4256 All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS

The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

CVE-2022-4256

The CVE concerns WordPress plugin All-in-One Addons for Elementor (WidgetKit) variants prior to version 2.4.4. Root cause: the plugin does not fully sanitise/escape certain settings, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disabled (notably in multi...

CVE-2022-4256 All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS

The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

CVE-2021-4256

creationtimestamp| type| source ---|---|--- 2022-12-19 00:41:15+00:00| seen| https://t.me/cibsecurity/54833...

CVE-2021-4256

CVE-2021-4256 affects the ctrlo lenio project, originating from an issue in the file views/index.tt. Attacker-controlled parameters task.name and task.site.org.name can be manipulated to trigger cross-site scripting. The vulnerability is exploitable remotely. A patch is identified by the hash e16...

CVE-2021-4256 ctrlo lenio index.tt cross site scripting

A vulnerability was found in ctrlo lenio. It has been classified as problematic. This affects an unknown part of the file views/index.tt. The manipulation of the argument task.name/task.site.org.name leads to cross site scripting. It is possible to initiate the attack remotely. The name of the...

Oracle Linux 8 : graphviz (ELSA-2021-4256)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4256 advisory. - Fixed races during pdf documentation build which should build docs correctly Related: CVE-2020-18032 - Rebuilt, because pdf documentation were built incorrect...

CentOS 8 : graphviz (CESA-2021:4256)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4256 advisory. - graphviz: off-by-one in parsereclbl in lib/common/shapes.c CVE-2020-18032 Note that Nessus has not tested for this issue but has instead relied only on the...

RHEL 6 / 7 / 8 : Red Hat JBoss Enterprise Application Platform 7.3 (RHSA-2020:4256)

The remote Redhat Enterprise Linux 6 / 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:4256 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This asynchrono...

Ubuntu 16.04 LTS / 18.04 LTS : Cyrus SASL vulnerability (USN-4256-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4256-1 advisory. It was discovered that Cyrus SASL incorrectly handled certain LDAP packets. An attacker could possibly use this issue to execute arbitrary code or cau...

Ubuntu: Security Advisory (USN-4256-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...