54 matches found
CVE-2018-6160
JavaScript alert handling in Prompts in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2018-6160
JavaScript alert handling in Prompts in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2018-6160
CVE-2018-6160 concerns Google Chrome (iOS) where JavaScript/HTML crafted content allowed a remote attacker to spoof the Omnibox (URL bar). The connected Chrome/Chromium notes confirm this as a URL spoof issue in Chrome on iOS and tie the vulnerability to the Chromium 68.0.3440.75 release family. ...
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 68.0.3440.106 fixes security issues: Multiple flaws were found in the way Chromium 67.0.3396.87 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...
FreeBSD : chromium -- multiple vulnerabilities (b9c525d9-9198-11e8-beba-080027ef1a23)
Google Chrome Releases reports : 42 security fixes in this release, including : - 850350 High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07 - 848914 High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01 -...
Security Bulletin: Various security issues exist in WebSphere Service Registry and Repository version 8.5
Summary This bulletin describes a variety of noncritical security issues that have been found and fixed in WebSphere Service Registry and Repository version 8.5. Vulnerability Details CVE ID: CVE-2014-6153 DESCRIPTION: WSRR WEBUI ISSUES A COOKIE WHICH IS NOT DECLARED SSL ONLY. CVSS CVSS Base Scor...
CVE-2017-6160
In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel TMM to restart and temporarily fail to process traffic. This issue is exposed on virtual servers...
CVE-2017-6160
CVE-2017-6160 affects F5 BIG-IP TMM: remote attacker can craft HTTP requests to force Traffic Management Microkernel (TMM) to restart, causing temporary traffic disruption. According to the advisory, vulnerable configurations include BIG-IP AAM (versions 12.0.0–12.1.1, 11.6.0–11.6.1, 11.4.1–11.5....
F5 Networks BIG-IP : TMM vulnerability (K19430431)
A remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel TMM to restart and temporarily fail to process traffic. This issue is exposed on virtual servers using a Policy Enforcement profile or a Web Acceleration profile. CVE-2017-6160 Impact The Traffic...
Heap overflow
tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160...
CVE-2017-14266
The provided sources confirm a concrete vulnerability: Tcpreplay’s Tcprewrite (version 3.4.4) contains a heap-based buffer overflow triggered by a crafted PCAP file, potentially enabling memory corruption or code execution. This issue is related to CVE-2016-6160 (pre-4.1.2) and has public coverag...
CVE-2016-6160
tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service segmentation fault via a large frame, a related issue to CVE-2017-14266...
CVE-2016-6160
CVE-2016-6160 affects tcpreplay’s tcprewrite utility; before version 4.1.2 it allows remote attackers to cause a denial of service (segmentation fault) by sending a large PCAP frame. The issue is related to CVE-2017-14266, which describes a heap-based buffer overflow in Tcpreplay 3.4.4 triggered ...
CVE-2016-6160
tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service segmentation fault via a large frame, a related issue to CVE-2017-14266...
openSUSE Security Update : tcpreplay (openSUSE-2016-1408)
This update for tcpreplay to version 4.1.2 fixes the following issues : - CVE-2016-6160: Increase max packet size to 65549 to prevent segmentation faults boo987846 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Fedora Update for tcpreplay FEDORA-2016-904ed1d231
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 23 : tcpreplay (2016-72dae8ea7e)
Security fix for CVE-2016-6160. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Fedora 24 : tcpreplay (2016-904ed1d231)
Security fix for CVE-2016-6160. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
MGASA-2016-0247 Updated tcpreplay packages fixes CVE-2016-6160
Updated tcpreplay package fixes security vulnerability: The tcprewrite program, part of the tcpreplay suite, does not check the size of the frames it processes. Huge frames may trigger a segmentation fault, and they occur on interfaces with an MTU of or close to 65536. For example, the loopback...