CVE-2024-4855

CVE-2024-4855 describes a use-after-free in editcap (part of Wireshark) that can cause a denial of service when processing crafted capture files. The vulnerability stems from improper memory handling in the editcap component, leading to potential crash or resource exhaustion on affected builds. C...

CVE-2024-4855 Use After Free in editcap

Use after free issue in editcap could cause denial of service via crafted capture file...

CVE-2024-4855

Use after free issue in editcap could cause denial of service via crafted capture file...

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

CVE-2024-4854 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

CVE-2024-4854 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

CVE-2024-4854 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

CVE-2024-4853

CVE-2024-4853 corresponds to a memory handling issue in editcap that could cause a denial of service via crafted capture files in Wireshark. The connected advisories confirm affected components (Wireshark/editcap) and indicate patches/upgrades are available; for example, Debian LTS DLA-3906-1 not...

CVE-2024-4853 Mismatched Memory Management Routines in editcap

Memory handling issue in editcap could cause denial of service via crafted capture file...

CVE-2024-4853 Mismatched Memory Management Routines in editcap

Memory handling issue in editcap could cause denial of service via crafted capture file...

CVE-2024-4853

Memory handling issue in editcap could cause denial of service via crafted capture file...

CVE-2024-4853

Memory handling issue in editcap could cause denial of service via crafted capture file...

CVE-2024-34699 GZ::CTF allows unprivileged user can perform XSS attacks by constructing malicious team names.

GZ::CTF is a capture the flag platform. Prior to 0.20.1, unprivileged user can perform cross-site scripting attacks on other users by constructing malicious team names. This problem has been fixed in v0.20.1...

CVE-2024-20859

Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege...

PT-2024-25684

Name of the Vulnerable Software and Affected Versions sagemaker-python-sdk versions prior to 2.214.3 Description The capture dependencies function in the sagemaker.serve.save retrive.version 1 0 0.save.utils module allows for potentially unsafe Operating System OS Command Injection if an...

PT-2024-3514

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 6800 versions affected versions not specified Cisco IP Phone 7800 versions affected versions not specified Cisco IP Phone 8800 versions affected versions not specified Cisco Video Phone 8875 versions affected versions not...

Authentication Bypass By Capture-replay

LinOTP is vulnerable to Authentication Bypass By Capture-replay. The vulnerability is due to the activation of automatic resynchronization, allowing an attacker to successfully log in with OTP values recorded at a previous point in time...

Medium: wireshark

Issue Overview: T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file CVE-2024-2955 Affected Packages: wireshark Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for...

MGASA-2024-0149 Updated wireshark packages fix security vulnerability

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file. CVE-2024-2955...