100 matches found
Buffer overflow
Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'dochecksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This issue is different than CVE-2019-8381...
CVE-2020-8381
CVE-2020-8381 entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-8381
CVE-2016-8381 is rejected/not used; this CVE entry does not represent an active vulnerability.
[ASA-201905-5] tcpreplay: multiple issues
Arch Linux Security Advisory ASA-201905-5 ========================================= Severity: High Date : 2019-05-06 CVE-ID : CVE-2019-8376 CVE-2019-8377 CVE-2019-8381 Package : tcpreplay Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-902 Summary ======= The package...
Arbitrary Code Execution
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Fedora 29 : tcpreplay (2019-e40253f67e)
Patch CVE-2019-8376, CVE-2019-8377 and CVE-2019-8381. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora 28 : tcpreplay (2019-a9c08d4b40)
Patch CVE-2019-8376, CVE-2019-8377 and CVE-2019-8381. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
CVE-2019-8381
CVE-2019-8381 affects Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum() of checksum.c when processing crafted pcap files via tcpreplay-edit, leading to a Denial of Service (Segmentation fault) and potentially other impact. Remediation is to upgrade Tcpreplay to 4.3.2 (e.g., 4.3.2-...
Arbitrary Code Execution
microsoft.chakracore is vulnerable to arbitrary code execution. The lack of type checking can lead to memory corruption or arbitrary code being executed. This vulnerability affects Microsoft Edge. This CVE ID is different from CVE-2018-8380, CVE-2018-8381, CVE-2018-8384...
Remote code execution
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8266, CVE-2018-8380, CVE-2018-8381...
CVE-2018-8381
CVE-2018-8381 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by the way objects are handled in memory (memory corruption). The issue affects Edge and ChakraCore, with a Cambridge of related CVEs in the 2018-83xx family (e.g., ...
CVE-2018-8381
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8266, CVE-2018-8380,...
CVE-2017-8381
XnView Classic for Windows 2.40 is affected by CVE-2017-8381. The flaw allows a user-assisted remote attacker to execute code by opening a crafted .mkv file, triggered during the handling of a directory in Browser mode due to a User Mode Write AV near NULL in XnView.exe. Impact described as remot...
GLSA-201607-02 : libpcre: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201607-02 libpcre: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in libpcre. Please review the CVE identifiers referenced below for details. Impact : An attacker can possibly execute arbitrary code or crea...
CVE-2015-8381
The compileregex function in pcrecompile.c in PCRE before 8.38 and pcre2compile.c in PCRE2 before 10.2x mishandles the /?J:?|:?|?'R'\k'R'|?'R'H'Rk'Rf|s?'R'/ and /?J:?|:?|?'R'\z?|?'R'\k'R'|?'R'k'R'|?'R'H'Ak'Rf|s?'R'/ patterns, and related patterns with certain group references, which allows remote...
CVE-2014-8381
Multiple cross-site scripting XSS vulnerabilities in Megapolis.Portal Manager allow remote attackers to inject arbitrary web script or HTML via the 1 dateFrom or 2 dateTo parameter...
CVE-2014-8381
CVE-2014-8381 affects Megapolis.Portal Manager with multiple XSS vulnerabilities allowing remote attackers to inject arbitrary script via dateFrom or dateTo parameters. Core detail across sources shows web-app input handling flaw enabling script/HTML injection, resulting in partial integrity impa...
Fedora 18 : varnish-3.0.3-5.fc18 (2013-8381)
Added macro hardenedbuild to enforce compiling with PIE - Moved ldconfig in postun script to a shell line - Corrected some bogus dates in the changelog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...