CVE-2019-15945

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

Updated wireshark packages fix security vulnerability

Updated wireshark packages fix security vulnerability: ASN.1 BER and related dissectors crash CVE-2019-13619...

MGASA-2019-0227 Updated wireshark packages fix security vulnerability

Updated wireshark packages fix security vulnerability: ASN.1 BER and related dissectors crash CVE-2019-13619...

openSUSE Security Update : wireshark (openSUSE-2019-1965)

This update for wireshark to version 2.4.16 fixes the following issues : Security issue fixed : - CVE-2019-13619: ASN.1 BER and related dissectors crash bsc1141980. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and packa...

Ubuntu: Security Advisory (USN-4105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2019:1965-1 Security update for wireshark

This update for wireshark to version 2.4.16 fixes the following issues: Security issue fixed: - CVE-2019-13619: ASN.1 BER and related dissectors crash bsc1141980. This update was imported from the SUSE:SLE-15:Update update project...

USN-4105-1: CUPS vulnerabilities

Stephan Zeisberg discovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issue to cause CUPS to crash by providing specially crafted network traffic. CVE-2019-8696, CVE-2019-8675 It was discovered that CUPS did not properly handle...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2019:1965-1 Rating: moderate References: 1141980 Cross-References: CVE-2019-13619 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: Thi...

openssl security update

1.0.1e-58.0.1 - Oracle bug 28730228: backport CVE-2018-0732 - Oracle bug 28758493: backport CVE-2018-0737 - Merge upstream patch to fix CVE-2018-0739 - Avoid out-of-bounds read. Fixes CVE 2017-3735. By Rich Salz - sha256 is used for the RSA pairwise consistency test instead of sha1 1.0.1e-58 - fi...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openssl Multiple Vulnerabilities (NS-SA-2019-0033)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssl packages installed that are affected by multiple vulnerabilities: - OpenSSL 1.0.2 starting from version 1.0.2b introduced an error state mechanism. The intent was that if a fatal error occurred during a handshake th...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2019:2104-1)

This update for wireshark to version 2.4.16 fixes the following issues : Security issue fixed : CVE-2019-13619: ASN.1 BER and related dissectors crash bsc1141980. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE-SU-2019:2104-1 Security update for wireshark

This update for wireshark to version 2.4.16 fixes the following issues: Security issue fixed: - CVE-2019-13619: ASN.1 BER and related dissectors crash bsc1141980...

SUSE-SU-2019:2103-1 Security update for wireshark

This update for wireshark to version 2.4.16 fixes the following issues: Security issue fixed: - CVE-2019-13619: ASN.1 BER and related dissectors crash bsc1141980...

Security Bulletin:IBM Security Identity Adapters has released a fix in response to the OpenSSL vulnerabilities

Summary IBM has released the following a fix for IBM Security Identity Adapters in response to OpenSSL vulnerabilities CVE-2018-0732, CVE-2018-0733, CVE-2018-0734, CVE-2018-0739 and CVE-2019-1559 Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: OpenSSL is vulnerable to a denial of service,...

Wireshark 2.4.x < 2.4.16 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.4.16. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.4.16 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissecto...

Wireshark Denial of Service Vulnerability (CNVD-2021-11324)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark versions 3.0.0 through 3.0.2, 2.6.0 throug...

Wireshark 2.6.x < 2.6.10 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 2.6.10. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.6.10 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could...

Wireshark 2.4.x < 2.4.16 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 2.4.16. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.4.16 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could...

Wireshark 3.0.x < 3.0.3 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.0.3. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.3 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors...

Wireshark 3.0.x < 3.0.3 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.0.3. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.3 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could...