CVE-2018-16807

Removed by vendor...

CVE-2018-16807

CVE-2018-16807 affects Bro/Zeek (Kerberos protocol parser) through version 2.5.5, where a memory leak could lead to denial of service. The root cause is a memory leak in scripts/base/protocols/krb/main.bro within the Kerberos parser. Impact is described as potential DoS, with availability potenti...

CVE-2018-16807

In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser...

FreeBSD : bro -- array bounds and potential DOS issues (d0be41fe-2a20-4633-b057-4e8b25c41780)

Corelight reports : Bro 2.5.5 primarily addresses security issues : - Fix array bounds checking in BinPAC: for arrays that are fields within a record, the bounds check was based on a pointer to the start of the record rather than the start of the array field, potentially resulting in a buffer...

bro -- array bounds and potential DOS issues

Corelight reports: Bro 2.5.5 primarily addresses security issues: Fix array bounds checking in BinPAC: for arrays that are fields within a record, the bounds check was based on a pointer to the start of the record rather than the start of the array field, potentially resulting in a buffer...

ProbeManager - Centralize Management Of Intrusion Detection System Like Suricata, Bro, Ossec...

It is common to see that many IDS intrusion and detection system, including the software and its rules are not updated regularly. This can be explained by the fact the software and rule management is often complicated, which can be a particular problem for small and medium sized enterprises that...

FreeBSD : bro -- multiple memory allocation issues (2f4fd3aa-32f8-4116-92f2-68f05398348e)

Corelight reports : Bro 2.5.4 primarily fixes security issues Multiple fixes and improvements to BinPAC generated code related to array parsing, with potential impact to all Bro's BinPAC-generated analyzers in the form of buffer over-reads or other invalid memory accesses depending on whether a...

bro -- multiple memory allocation issues

Corelight reports: Bro 2.5.4 primarily fixes security issues Multiple fixes and improvements to BinPAC generated code related to array parsing, with potential impact to all Bro's BinPAC-generated analyzers in the form of buffer over-reads or other invalid memory accesses depending on whether a...

Security Onion - Linux Distro For IDS, NSM, And Log Management

Security Onion is a free and open source Linux distribution for intrusion detection, enterprise security monitoring, and log management. It includes Elasticsearch, Logstash, Kibana, Snort, Suricata, Bro, OSSEC, Sguil, Squert, NetworkMiner, and many other security tools. The easy-to-use Setup wiza...

FreeBSD : bro -- integer overflow allows remote DOS (044cff62-ed8b-4e72-b102-18a7d58a669f)

Philippe Antoine of Catena cyber : This is a security release that fixes an integer overflow in code generated by binpac. This issue can be used by remote attackers to crash Bro i.e. a DoS attack. There also is a possibility this can be exploited in other ways. CVE pending. C Tenable Network...

FreeBSD : bro -- out of bounds write allows remote DOS (746d04dc-507e-4450-911f-4c41e48bb07a)

Frank Meier : Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to cause a denial of service crash and possibly other exploitation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

bro -- integer overflow allows remote DOS

Philippe Antoine of Catena cyber: This is a security release that fixes an integer overflow in code generated by binpac. This issue can be used by remote attackers to crash Bro i.e. a DoS attack. There also is a possibility this can be exploited in other ways. CVE pending...

Bro Out-of-Bounds Write Vulnerability

Bro is an open source network security monitoring software from The Bro project.ContentLine analyzer is one of the content analyzers. A security vulnerability exists in ContentLine analyzer in versions of Bro prior to 2.5.2. A remote attacker could exploit this vulnerability to cause a denial of...

CVE-2017-1000458

Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to cause a denial of service crash and possibly other exploitation...

Out-of-bounds

Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to cause a denial of service crash and possibly other exploitation...

CVE-2017-1000458

Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to cause a denial of service crash and possibly other exploitation...

CVE-2017-1000458

Summary: CVE-2017-1000458 affects the Bro network monitor (Bro before v2.5.2). Affected component is the ContentLine analyzer, where an out-of-bounds write can be triggered remotely, leading to a denial of service (crash) and potentially other exploitation. The provided documents confirm the vuln...

CVE-2017-1000458

Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to cause a denial of service crash and possibly other exploitation...

CVE-2017-1000458

Removed by vendor...

bro -- out of bounds write allows remote DOS

Frank Meier: Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to cause a denial of service crash and possibly other exploitation...