CVE-2017-8045

CVE-2017-8045 is a deserialization vulnerability in Pivotal Spring AMQP. The issue affects versions prior to 1.7.4, 1.6.11, and 1.5.7 where an org.springframework.amqp.core.Message can be unsafely deserialized when converted to a string, enabling remote code execution. Public sources (OSV and CVE...

CVE-2017-8045

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

PT-2017-18088

Name of the Vulnerable Software and Affected Versions Pivotal Spring AMQP versions prior to 1.7.4 Pivotal Spring AMQP versions prior to 1.6.11 Pivotal Spring AMQP versions prior to 1.5.7 Description The issue allows an org.springframework.amqp.core.Message to be unsafely deserialized when being...

CVE-2017-8045: Deserialization of Untrusted Data

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

CVE-2017-15699

A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vulnerability, a remote user must be able to establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame which will cause it to segfault and...

Pivotal Spring AMQP Remote Code Execution Vulnerability

Spring AMQP is based on the Spring Framework AMQP messaging solution , providing templated send and receive messages to the abstraction layer , providing message-driven POJO-based message listening and so on. A remote code execution vulnerability exists in Pivotal Spring AMQP...

Remote Code Execution (RCE)

spring-amqp is vulnerable to remote code execution RCE attacks. A malicious user can pass a org.springframework.amqp.core.Message object containing arbitrary code that is executed when deserialized by the application...

Remote code execution in spring-amqp

In affected versions of Spring AMQP, a org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:2033-1)

This wireshark update to version 2.2.8 fixes the following issues: Security issues fixed : - CVE-2017-11411: The openSAFETY dissectorcould crash or exhaust system memory because of missing length validation. bsc1049621 - CVE-2017-11410: The WBXML dissector could go into an infinite loop. bsc10492...

SUSE SLES11 Security Update : wireshark (SUSE-SU-2017:2032-1)

This wireshark update to version 2.2.8 fixes the following issues: Security issues fixed : - CVE-2017-11411: The openSAFETY dissectorcould crash or exhaust system memory because of missing length validation. bsc1049621 - CVE-2017-11410: The WBXML dissector could go into an infinite loop. bsc10492...

Wireshark 2.2.x < 2.2.8 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.8 advisory. - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system...

Wireshark 2.2.x < 2.2.8 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.8 advisory. - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory...

Wireshark Multiple DoS Vulnerabilities (Jul 2017) - Windows

wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-11408

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

ALPINE-CVE-2017-11408

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

Design/Logic Flaw

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

CVE-2017-11408

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

CVE-2017-11408

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

CVE-2017-11408

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

CVE-2017-11408

Wireshark AMQP dissector (versions 2.0.0–2.0.13 and 2.2.0–2.2.7) is affected by CVE-2017-11408 due to an insufficient check during AMQP list dissection in epan/dissectors/packet-amqp.c, which could crash the dissector. The issue causes a denial of service when processing crafted packets; upstream...