CVE-2018-5335

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/packet-wcp.c by validating the available buffer length...

CVE-2018-5335

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/packet-wcp.c by validating the available buffer length...

CVE-2018-5335

Wireshark CVE-2018-5335 affects the WCP dissector. Vulnerable in Wireshark 2.4.0–2.4.3 and 2.2.0–2.2.11; the crash was caused by insufficient buffer length validation in epan/dissectors/packet-wcp.c. The issue has been fixed by adding proper buffer-length validation. Remediation is to upgrade to ...

KLA11176 Multiple DoS vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. A recursion depth error in epan/tvbparse.c can be exploited remotely via a malformed packet to cause denial ...

CVE-2013-5335

...

CVE-2013-5335

CVE-2013-5335 is rejected/not used; the candidate does not represent an active vulnerability.

CVE-2017-5335

GnuTLS CVE-2017-5335 affects the OpenPGP certificate handling in lib/opencdk/read-packet.c: streams reading certificates can trigger an out-of-memory crash via crafted OpenPGP data. Affected versions are GnuTLS before 3.3.26 and 3.5.x before 3.5.8. Multiple external advisories (CentOS, Red Hat, U...

RHEL 6 : gnutls (RHSA-2017:0574)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0574 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as...

Updated gnutls packages fix security vulnerability

Remote denial of service in SSL alert handling. CVE-2016-8610 In gnutlsx509extimportproxy: if the language was set but the policy wasn't, that could lead to a double free. CVE-2017-5334 Decoding a specially crafted OpenPGP certificate could have lead to heap and stack overflows. CVE-2017-5335,...

Ubuntu: Security Advisory (USN-3183-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : gnutls (SUSE-SU-2017:0304-1)

This update for gnutls fixes the following issues : - Malformed asn1 definitions could cause a segmentation fault in the asn1 definition parser bsc961491. - CVE-2016-8610: Remote denial of service in SSL alert handling bsc1005879. - CVE-2017-5335: Decoding a specially crafted OpenPGP certificate...

Fedora 24 : gnutls (2017-e86817c42e)

Security fix for CVE-2017-5337, CVE-2017-5334, CVE-2017-5336, CVE-2017-5335 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2016-5335

CVE-2016-5335 affects VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1. The issue is a local privilege escalation via unspecified vectors, allowing a low-privileged user to obtain root. VMware issued VMSA-2016-0013 and provided patches: Identity Manager 2.7 and vRea...

CVE-2016-5335

VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors...

VMware vRealize Automation 7.0.x < 7.1 Multiple Vulnerabilities (VMSA-2016-0013)

The VMware vRealize Automation application running on the remote host is version 7.0.x prior to 7.1. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists that allows a local attacker to elevate privileges from a low-privileged account to root access...

VMSA-2016-0013:VMware Identity Manager and vRealize Automation updates address multiple security issues

VMSA-2016-0013 VMware Identity Manager and vRealize Automation updates address multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0013 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Identity Manager and vRealiz...

XpoLog Center 6 - Remote Command Execution / Cross-Site Request Forgery

XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc: XpoLog suffers from arbitrary command execution. Attackers...

Fedora 22 : moodle-2.8.9-1.fc22 (2015-2ebdd4ad8f)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 23 : moodle-2.9.3-1.fc23 (2015-98fc0d20ad)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2015-5335

CVE-2015-5335 affects Moodle versions 2.6.11 and earlier, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3. It is a Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php that can allow remote attackers to hijack the authentication of administrators for ...