26 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: iperf3 (UTSA-2023-002138)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002138 advisory. iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. Tenable has extracted the preceding description block...
JLSEC-2026-759
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...
CVE-2025-64096
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to 1.4.2, there is a missing bounds check in CryptoKeyupdate...
OESA-2023-1497 iperf3 security update
Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers. Security Fixes: iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length...
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.
...
CVE-2023-38403
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...
Integer overflow
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...
UBUNTU-CVE-2023-38403
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...
CVE-2023-38403: Integer Overflow or Wraparound
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...
CVE-2023-38403
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...
SUSE CVE-2015-2192
Integer overflow in the dissectosd2cdbcontinuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service infinite loop via a crafted length field in a packet...
SUSE CVE-2015-2191
Integer overflow in the dissecttnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service infinite loop via a crafted length field in a packet...
Denial Of Service (DoS)
gnupg2 is vulnerable to denial of service DoS attacks. The vulnerability exists as the readblock function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service...
Multiple Huawei products eSap software platform heap buffer overflow vulnerability
Huawei Campus S9300 and so on are products of Huawei, China. campus S9300 and so on are switch devices. wlan AC6005 and so on are access controller devices. eSap software platform is a set of ESAP software platform running in it. A heap buffer overflow vulnerability exists in the eSap software...
CVE-2014-4705: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and AC...
wireshark: The TNEF dissector could go into an infinite loop on 32-bit architectures (wnpa-sec-2015-10)
Integer overflow in the dissecttnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service infinite loop via a crafted length field in a packet...
CVE-2015-2191
Integer overflow in the dissecttnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service infinite loop via a crafted length field in a packet...
UBUNTU-CVE-2015-2192
Integer overflow in the dissectosd2cdbcontinuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service infinite loop via a crafted length field in a packet...
CVE-2014-4190: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple heap-based buffer overflows in Huawei Campus Series Switches S3700HI, S5700, S6700, S3300HI, S5300, S6300, S9300, S7700, and LSW S9700 with software V200R001 before V200R001SPH013; S5700, S6700, S5300, and S6300 with software V200R002 before V200R002SPH005; S7700, S9300, S9300E, S5300,...
pidgin: DoS caused due to OOB read in Yahoo protocol plugin
libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service crash via a Yahoo! P2P message with a crafted length field, which triggers a buffer over-read...