40 matches found
SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:0867-1)
This update for wireshark fixes the following issues: Security issue fixed bsc1082692 : - CVE-2018-7335: The IEEE 802.11 dissector could crash wnpa-sec-2018-05 - CVE-2018-7321: thrift long dissector loop dissectthriftmap - CVE-2018-7322: DICOM: inifinite loop dissectdcmtag - CVE-2018-7323: WCCP:...
SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0811-1)
This update for wireshark fixes the following issues: Security issue fixed bsc1082692 : - CVE-2018-7335: The IEEE 802.11 dissector could crash wnpa-sec-2018-05 - CVE-2018-7321: thrift long dissector loop dissectthriftmap - CVE-2018-7322: DICOM: inifinite loop dissectdcmtag - CVE-2018-7323: WCCP:...
Security fix for the ALT Linux 9 package wireshark version 2.4.5-alt1
Feb. 26, 2018 Anton Farygin 2.4.5-alt1 - 2.4.5 - fixes: wnpa-sec-2018-05 The IEEE 802.11 dissector could crash. CVE-2018-7335 wnpa-sec-2018-06 Multiple dissectors could go into large infinite loops. All ASN.1 BER dissectors, along with the DICOM, DMP, LLTD, OpenFlow, RELOAD, RPCoRDMA, RPKI-Router...
Wireshark Security Updates (wnpa-sec-2018-05 to wnpa-sec-2018-14) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
DEBIAN-CVE-2018-7328
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short frame header lengths...
CVE-2018-7328
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short frame header lengths...
CVE-2018-7328
CVE-2018-7328 affects Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12, where epan/dissectors/packet-usb.c could enter an infinite loop. The vulnerability was addressed by rejecting short frame header lengths. Affected versions require updating to a non-vulnerable release (e.g., later Wireshark versions). ...
CVE-2018-7328
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short frame header lengths...
KLA11201 Multiple vulnerabilities in Wireshark
Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An improper operand validation offsets in the SIGCOMP protocol dissector can be exploited remotely via...
CVE-2016-7328
This CVE-2016-7328 entry is rejected/not used and does not represent an active vulnerability.
CVE-2014-7328
The CVE-2014-7328 entry concerns the Android application brain abundance info (com.wbrainabundance) v0.1, which does not verify X.509 certificates when connecting to SSL servers. This allows man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. N...
Ubuntu Update for php5 USN-2126-1
Check for the Version of php5 OpenVAS Vulnerability Test $Id: gbubuntuUSN21261.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for php5 USN-2126-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...
Ubuntu: Security Advisory (USN-2126-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : php5 vulnerabilities (USN-2126-1)
Bernd Melchers discovered that PHP's embedded libmagic library incorrectly handled indirect offset values. An attacker could use this issue to cause PHP to consume resources or crash, resulting in a denial of service. CVE-2014-1943 It was discovered that PHP incorrectly handled certain values whe...
PHP 'ext/gd/gd.c' gdImageCrop整数符号错误漏洞
CVE ID:CVE-2013-7328 PHP是一种HTML内嵌式的语言。 PHP 'ext/gd/gd.c' gdImageCrop函数存在多个整数符号错误，允许远程攻击者通过调用x或Y维度为负值的imagecrop函数，可使应用程序崩溃或获取敏感信息。 0 PHP 5.5.x PHP 5.5.9已经修复该漏洞，建议用户下载更新： http://php.net...
BELL-CVE-2013-7328 CVE-2013-7328 does not affect BellSoft software
Bulletin has no description...
CVE-2013-7328
CVE-2013-7328 affects PHP 5.5.x before 5.5.9 due to multiple integer signedness errors in the gdImageCrop function (ext/gd/gd.c). A remote attacker can trigger a denial of service (application crash) or information disclosure by calling imagecrop with a negative x or y dimension. The issue is tie...
PHP 5.5.x < 5.5.9 GD Extension Multiple Vulnerabilities
Binary data 8125.prm...
SuSE 11.2 Security Update : nagios (SAT Patch Number 7328)
This update fixes a stack overflow in nagios web interface. CVE-2012-6096 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...