USN-4105-1: CUPS vulnerabilities

Stephan Zeisberg discovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issue to cause CUPS to crash by providing specially crafted network traffic. CVE-2019-8696, CVE-2019-8675 It was discovered that CUPS did not properly handle...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2019:1965-1 Rating: moderate References: 1141980 Cross-References: CVE-2019-13619 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: Thi...

openssl security update

1.0.1e-58.0.1 - Oracle bug 28730228: backport CVE-2018-0732 - Oracle bug 28758493: backport CVE-2018-0737 - Merge upstream patch to fix CVE-2018-0739 - Avoid out-of-bounds read. Fixes CVE 2017-3735. By Rich Salz - sha256 is used for the RSA pairwise consistency test instead of sha1 1.0.1e-58 - fi...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openssl Multiple Vulnerabilities (NS-SA-2019-0033)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssl packages installed that are affected by multiple vulnerabilities: - OpenSSL 1.0.2 starting from version 1.0.2b introduced an error state mechanism. The intent was that if a fatal error occurred during a handshake th...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2019:2104-1)

This update for wireshark to version 2.4.16 fixes the following issues : Security issue fixed : CVE-2019-13619: ASN.1 BER and related dissectors crash bsc1141980. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE-SU-2019:2104-1 Security update for wireshark

This update for wireshark to version 2.4.16 fixes the following issues: Security issue fixed: - CVE-2019-13619: ASN.1 BER and related dissectors crash bsc1141980...

SUSE-SU-2019:2103-1 Security update for wireshark

This update for wireshark to version 2.4.16 fixes the following issues: Security issue fixed: - CVE-2019-13619: ASN.1 BER and related dissectors crash bsc1141980...

Security Bulletin:IBM Security Identity Adapters has released a fix in response to the OpenSSL vulnerabilities

Summary IBM has released the following a fix for IBM Security Identity Adapters in response to OpenSSL vulnerabilities CVE-2018-0732, CVE-2018-0733, CVE-2018-0734, CVE-2018-0739 and CVE-2019-1559 Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: OpenSSL is vulnerable to a denial of service,...

Wireshark 2.4.x < 2.4.16 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 2.4.16. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.4.16 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could...

Wireshark 3.0.x < 3.0.3 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.0.3. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.3 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors...

Wireshark 2.6.x < 2.6.10 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.6.10. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.6.10 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissecto...

Wireshark Denial of Service Vulnerability (CNVD-2021-11324)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark versions 3.0.0 through 3.0.2, 2.6.0 throug...

Wireshark 2.4.x < 2.4.16 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.4.16. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.4.16 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissecto...

Wireshark 2.6.x < 2.6.10 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 2.6.10. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.6.10 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could...

Wireshark 3.0.x < 3.0.3 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.0.3. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.3 advisory. - In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could...

CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...

CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...

CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...

Buffer overflow

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...

CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...