wireshark security update

CentOS Errata and Security Advisory CESA-2014:1676 Updated wireshark packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

Fedora Update for wireshark FEDORA-2014-11441

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark DOS Vulnerability-01 (Sep 2014) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark DOS Vulnerability-01 (Sep 2014) - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

CVE-2014-6431

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service application crash via a crafted file that triggers writes of uncompressed bytes...

CVE-2014-6431

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service application crash via a crafted file that triggers writes of uncompressed bytes...

CVE-2014-6431

CVE-2014-6431 affects Wireshark’s DOS Sniffer file parser. The issue is a buffer overflow in the SnifferDecompress function (wiretap/ngsniffer.c) that can crash the application when processing a crafted file, via writes of uncompressed bytes beyond the end of the output buffer. Vulnerable in Wire...

Wireshark 1.12.x < 1.12.1 Multiple DoS Vulnerabilities

The installed version of Wireshark is version 1.12.x prior to 1.12.1. It is, therefore, affected by the following vulnerabilities : - Errors exist in the following dissectors that can cause the application to crash : - CUPS CVE-2014-6425 - HIP CVE-2014-6426 - MEGACO CVE-2014-6423 - Netflow...

Wireshark 1.10.x < 1.10.10 Multiple DoS Vulnerabilities

The installed version of Wireshark is version 1.10.x prior to 1.10.10. It is, therefore, affected by the following vulnerabilities : - Errors exist in the following dissectors that can cause the application to crash : - MEGACO CVE-2014-6423 - Netflow CVE-2014-6424 - RTP CVE-2014-6421, CVE-2014-64...

RHEL 6 : MRG (RHSA-2014:0100)

Updated kernel-rt packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise MRG 2.4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

openSUSE: Security Advisory for kernel (openSUSE-SU-2014:0204-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for kernel openSUSE-SU-2014:0204-1 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201402041.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for kernel openSUSE-SU-2014:0204-1 kernel Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Ubuntu: Security Advisory (USN-2049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-6431

The CVE-2013-6431 issue affects the Linux kernel’s IPv6 routing code: the fib6_add function in net/ipv6/ip6_fib.c fails to encode error codes correctly in versions before 3.11.5, enabling a local user with CAP_NET_ADMIN to trigger a NULL pointer dereference via an IPv6 SIOCADDRT ioctl, causing a ...

Ubuntu: Security Advisory (USN-2045-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2041-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2045-1: Linux kernel vulnerabilities

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Alan Chester reported a flaw in the IPv6 Stream Control Transmission Protocol SCTP of the Linux kernel. A...

USN-2041-1: Linux kernel (Raring HWE) vulnerabilities

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Alan Chester reported a flaw in the IPv6 Stream Control Transmission Protocol SCTP of the Linux kernel. A...

SuSE 11.2 Security Update : hyper-v (SAT Patch Number 6431)

The Hyper-V userland daemon was updated to match the current kernel Hyper-V feature level. It brings key-value-pair storage that can be queried by the kernel via the netlink interface and can pass information out to the Hyper-V hypervisor. The netlink query code was adjusted to only allow the Lin...

CVE-2012-6431

Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string...