81 matches found
CVE-2019-12175
The CVE-2019-12175 entry concerns Zeek (Bro) Network Security Monitor prior to version 2.6.2, where a NULL pointer dereference in the Kerberos (KRB) protocol parser causes a denial of service due to mishandling of a case-type index. Public details from multiple connected sources confirm the affec...
Lynis 2.7.5 - Security Auditing Tool for Unix/Linux Systems
We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...
FreeBSD : bro -- Unsafe integer conversions can cause unintentional code paths to be executed (177fa455-48fc-4ded-ba1b-9975caa7f62a)
Jon Siwek of Corelight reports : The following Denial of Service vulnerabilities are addressed : - Integer type mismatches in BinPAC-generated parser code and Bro analyzer code may allow for crafted packet data to cause unintentional code paths in the analysis logic to be taken due to unsafe...
FreeBSD : bro -- 'Magellan' remote code execution vulnerability in bundled sqlite (b80f039d-579e-4b82-95ad-b534a709f220)
Bro Network security Monitor reports : Bro 2.6.1 updates the embedded SQLite to version 3.26.0 to address the 'Magellan' remote code execution vulnerability. The stock Bro configuration/scripts don't use SQLite by default, but custom user scripts/packages may. C Tenable Network Security, Inc. The...
bro -- "Magellan" remote code execution vulnerability in bundled sqlite
Bro Network security Monitor reports: Bro 2.6.1 updates the embedded SQLite to version 3.26.0 to address the "Magellan" remote code execution vulnerability. The stock Bro configuration/scripts don't use SQLite by default, but custom user scripts/packages may...
Bro Denial of Service Vulnerability
Bro is an open source framework for network analysis and security monitoring . A denial of service vulnerability exists in the IRC protocol name command parsing process in the analyzer/protocol/irc/IRC.cc file in Bro 2.5.5 and earlier versions, which can be exploited by an attacker to cause a...
CVE-2018-17019
In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc...
CVE-2018-17019
In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc...
Command injection
In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc...
UBUNTU-CVE-2018-17019
In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc...
CVE-2018-17019
In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc...
CVE-2018-17019
In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc...
CVE-2018-17019
CVE-2018-17019 affects the Bro/Zeek framework up to version 2.5.5. The vulnerability is a denial-of-service in IRC protocol names command parsing, implemented in analyzer/protocol/irc/IRC.cc. The available connected documents confirm the DoS nature and the affected component, but do not provide a...
CVE-2018-17019
Removed by vendor...
Twenty Years of Network Security Monitoring: From the AFCERT to Corelight
I am really fired up to join Corelight. I’ve had to keep my involvement with the team a secret since officially starting on July 20th. Why was I so excited about this company? Let me step backwards to help explain my present situation, and forecast the future. Twenty years ago this month I joined...
CVE-2018-16807
In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser...
CVE-2018-16807
In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser...
Memory corruption
In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser...