Lucene search
+L

7696 matches found

RedhatCVE
RedhatCVE
•added 2024/03/27 8:32 a.m.•76 views

CVE-2024-2955

A flaw was found in the T.38 dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a use-after-free problem, resulting in a denial of service...

6.5CVSS7.4AI score0.01403EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/03/27 12:00 a.m.•38 views

Wireshark 4.2.x < 4.2.4 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.2.4. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.4 advisory. - T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injecti...

7.8CVSS6.9AI score0.01403EPSS
SaveExploits1References4
NVD
NVD
•added 2024/03/26 8:15 p.m.•31 views

CVE-2024-2955

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.6AI score0.01403EPSS
SaveExploits1References5
OSV
OSV
•added 2024/03/26 8:15 p.m.•17 views

AZL-42549 CVE-2024-2955 affecting package wireshark for versions less than 4.4.7-1

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.1AI score0.01403EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/26 8:15 p.m.•4 views

DEBIAN-CVE-2024-2955

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.6AI score0.01403EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/26 8:15 p.m.•16 views

AZL-42523 CVE-2024-2955 affecting package wireshark 4.0.8-1

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.1AI score0.01403EPSS
SaveExploits1References1
Mend
Mend
•added 2024/03/26 8:02 p.m.•2 views

CVE-2024-2955

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

8.5CVSS0.01403EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
•added 2024/03/26 8:02 p.m.•48 views

CVE-2024-2955

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.8AI score0.01403EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/03/26 8:02 p.m.•34 views

CVE-2024-2955

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.3AI score0.01403EPSS
SaveExploits1
OSV
OSV
•added 2024/03/26 8:02 p.m.•11 views

CVE-2024-2955 Mismatched Memory Management Routines in Wireshark

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.8AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/03/26 12:00 a.m.•8 views

PT-2024-2501 · Wireshark +4 · Wireshark +4

Name of the Vulnerable Software and Affected Versions: Wireshark versions 4.0.0 through 4.0.13 Wireshark versions 4.0.3 through 4.2.0 Description: The issue is related to the T.38 dissector in Wireshark and is caused by improper memory management. Exploitation of this issue may allow an attacker ...

9.8CVSS6.2AI score0.0462EPSS
SaveExploits38References200
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/26 12:00 a.m.•2 views

CVE-2024-2955: Mismatched Memory Management Routines

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...

7.8CVSS5.7AI score0.01403EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/03/16 12:00 a.m.•9 views

PT-2024-40665 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow WRITE 4. The crash state involves several functions: dissect dns answer, dissec...

6.9AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/03/06 12:00 a.m.•12 views

The vulnerability of the __skb_flow_dissect() function in the networking component of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the skbflowdissect function in the net/core/flowdissector.c file of the Linux kernel’s network component is related to incorrect calculation of the network header offset. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and...

9.4CVSS6.5AI score0.00225EPSS
SaveExploits0References20Affected Software7
SUSE CVE
SUSE CVE
•added 2024/03/05 4:31 a.m.•17 views

SUSE CVE-2023-52580

In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETHP1588 flow dissector When a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff pattern is sent to skbflowdissect, nhoff value calculation is wrong. For example: hdr-messagelength takes t...

5.5CVSS6AI score0.00225EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2024/03/04 6:21 p.m.•35 views

CVE-2023-52580

A flaw was found in the ETHP1588 flow dissector in the Linux Kernel, which can lead to a kernel crash...

5.5CVSS8AI score0.00225EPSS
SaveExploits0References4
OSV
OSV
•added 2024/03/02 10:15 p.m.•5 views

DEBIAN-CVE-2023-52580

In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETHP1588 flow dissector When a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff pattern is sent to skbflowdissect, nhoff value calculation is wrong. For example: hdr-messagelength takes t...

5.5CVSS5.5AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/02 10:15 p.m.•35 views

CVE-2023-52580

In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETHP1588 flow dissector When a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff pattern is sent to skbflowdissect, nhoff value calculation is wrong. For example: hdr-messagelength takes t...

5.5CVSS9AI score0.00225EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2024/03/02 10:15 p.m.•45 views

CVE-2023-52580

In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETHP1588 flow dissector When a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff pattern is sent to skbflowdissect, nhoff value calculation is wrong. For example: hdr-messagelength takes t...

5.5CVSS6AI score0.00225EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/02 9:59 p.m.•27 views

CVE-2023-52580 net/core: Fix ETH_P_1588 flow dissector

In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETHP1588 flow dissector When a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff pattern is sent to skbflowdissect, nhoff value calculation is wrong. For example: hdr-messagelength takes t...

6.6AI score0.00225EPSS
SaveExploits0References4
Rows per page
Query Builder