DSA-3002-1 wireshark - security update

Bulletin has no description...

[ MDVSA-2014:159 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:159 http://www.mandriva.com/en/support/security/ Package : wireshark Date : August 8, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...

Debian: Security Advisory (DSA-3002-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : wireshark (MDVSA-2014:159)

Multiple vulnerabilities has been discovered and corrected in wireshark : - The Catapult DCT2000 and IrDA dissectors could underrun a buffer CVE-2014-5161, CVE-2014-5162. - The GTP and GSM Management dissectors could crash CVE-2014-5163. - The RLC dissector could crash CVE-2014-5164. - The ASN.1...

CVE-2014-5165

The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packe...

Buffer overflow

The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packe...

CVE-2014-5165

The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packe...

CVE-2014-5165

The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packe...

CVE-2014-5165

Wireshark 1.10.x before 1.10.9 is affected by CVE-2014-5165 in the ASN.1 BER dissector (dissect_ber_constrained_bitstring). The parser does not properly validate padding values, allowing remote attackers to trigger a denial of service (buffer underflow and crash) via crafted packets. Evidence acr...

CVE-2014-5165

The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packe...

RHEL 7 : libtasn1 (RHSA-2014:0687)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0687 advisory. The libtasn1 library provides Abstract Syntax Notation One ASN.1 parsing and structures management, and Distinguished Encoding Rules DER...

USN-2294-1: Libtasn1 vulnerabilities

It was discovered that Libtasn1 incorrectly handled certain ASN.1 data structures. An attacker could exploit this with specially crafted ASN.1 data and cause applications using Libtasn1 to crash, resulting in a denial of service. CVE-2014-3467 It was discovered that Libtasn1 incorrectly handled...

OpenSSL ASN.1<= 0.9.6j <= 0.9.7b - Brute Forcer for Parsing Bugs

No description provided by source. / Brute forcer for OpenSSL ASN.1 parsing bugs =0.9.6j =0.9.7b written by Bram Matthys Syzop on Oct 9 2003. This program sends corrupt client certificates to the SSL server which will 1 crash it 2 create lots of error messages, and/or 3 result in other interresti...

Asn Guestbook 1.5 - footer.php version Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14356/info Asn Guestbook is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issu...

Microsoft ASN.1 Library Bitstring Heap Overflow

No description provided by source. $Id: ms04007killbill.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

OpenSSL ASN.1 Parsing Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/8732/info Multiple vulnerabilities were reported in the ASN.1 parsing code in OpenSSL. Attackers could exploit these issues to cause a denial of service or to execute arbitrary code. / Brute forcer for OpenSSL ASN.1 parsi...

Asn Guestbook 1.5 - header.php version Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14356/info Asn Guestbook is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issu...

MS Windows ASN.1 - Remote Exploit (MS04-007)

No description provided by source. Microsoft ASN.1 remote exploit for CVE-2005-1935 // MS04-007 Solar Eclipse solareclipse at phreedom dot org http://www.exploit-db.com/sploits/12262006-killbill.tar.gz milw0rm.com 2004-03-26...

openSUSE Security Update : whois (openSUSE-SU-2013:1670-1)

update to 5.0.26 bnc848594 - Added the .cf TLD server. - Updated the .bi TLD server. - Added a new ASN allocation. - includes changes from 5.0.25 - Added the .ax, .bn, .iq, .pw and .rw TLD servers. - Updated one or more translations. - includes updates changes 5.0.24 : - Merged documentation...

openSUSE Security Update : wireshark (openSUSE-SU-2013:1295-1)

Wireshark was updated to 1.8.9 bnc831718 + vulnerabilities fixed : - The Bluetooth SDP dissector could go into a large loop CVE-2013-4927 wnpa-sec-2013-45 - The DIS dissector could go into a large loop CVE-2013-4929 wnpa-sec-2013-47 - The DVB-CI dissector could crash CVE-2013-4930 wnpa-sec-2013-4...