Lucene search
+L

2302 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/19 12:00 a.m.•5 views

CVE-2013-5140: Improper Input Validation

The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service assertion failure and device restart via an invalid packet fragment...

7.8CVSS5.8AI score0.02586EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2013/09/04 12:00 a.m.•60 views

Amazon Linux AMI : kernel (ALAS-2011-26)

IPv6 fragment identification value generation could allow a remote attacker to disrupt a target system's networking, preventing legitimate users from accessing its services. CVE-2011-2699 , Important A signedness issue was found in the Linux kernel's CIFS Common Internet File System implementatio...

9.1CVSS7.1AI score0.05616EPSS
SaveExploits9References15
Tenable Nessus
Tenable Nessus
•added 2013/07/12 12:00 a.m.•64 views

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2033)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2033 advisory. - ipv6: make fragment identifications less predictable Joe Jin CVE-2011-2699 - vlan: fix panic when handling priority tagged frames Joe Jin...

9.1CVSS7.1AI score0.05616EPSS
SaveExploits6References10
OSV
OSV
•added 2013/06/09 9:55 p.m.•12 views

CVE-2013-4083

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service application crash via a crafted...

6.2AI score
SaveExploits0References17
OSV
OSV
•added 2013/06/09 9:55 p.m.•5 views

DEBIAN-CVE-2013-4083

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service application crash via a crafted...

5CVSS7.3AI score0.03279EPSS
SaveExploits0References1
OSV
OSV
•added 2013/06/09 9:55 p.m.•13 views

UBUNTU-CVE-2013-4083

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service application crash via a crafted...

5CVSS7.1AI score0.03279EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2013/05/28 12:00 a.m.•40 views

Wireshark DCP ETSI Dissector DoS Vulnerability - June 13 (Mac OS X)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkdosvulnjun13macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Wireshark DCP ETSI Dissector DoS Vulnerability - June 13 Mac OS X Authors: Arun Kallavi Copyright: Copyright...

5CVSS7.5AI score0.03279EPSS
SaveExploits0References3
OSV
OSV
•added 2013/03/07 3:55 p.m.•10 views

DEBIAN-CVE-2013-2488

The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service application crash via a large offset value that triggers write access to an...

5CVSS7.4AI score0.02828EPSS
SaveExploits0References1
OSV
OSV
•added 2013/03/07 3:55 p.m.•9 views

UBUNTU-CVE-2013-2488

The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service application crash via a large offset value that triggers write access to an...

5CVSS7.1AI score0.02828EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2013/03/07 12:00 a.m.•3 views

PT-2013-3821

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue concerns the DTLS dissector in Wireshark, which fails to validate the fragment offset before invoking the reassembly state machine. This allow...

9.3CVSS0.41744EPSS
SaveExploits42References280
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/03/07 12:00 a.m.•5 views

CVE-2013-2488: Improper Input Validation

The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service application crash via a large offset value that triggers write access to an...

5CVSS5.9AI score0.02828EPSS
SaveExploits0References2
OSV
OSV
•added 2013/02/03 1:55 a.m.•6 views

DEBIAN-CVE-2013-1581

The dissectpftfecdetailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service loop via a malformed packet...

2.9CVSS7.3AI score0.00728EPSS
SaveExploits0References1
OSV
OSV
•added 2013/02/03 1:55 a.m.•8 views

DEBIAN-CVE-2013-1586

The fragmentsettotlen function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service application crash via a malformed packet...

2.9CVSS7AI score0.00826EPSS
SaveExploits0References1
OSV
OSV
•added 2013/02/03 1:55 a.m.•10 views

UBUNTU-CVE-2013-1581

The dissectpftfecdetailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service loop via a malformed packet...

2.9CVSS6.6AI score0.00728EPSS
SaveExploits0References5
OSV
OSV
•added 2013/02/03 1:55 a.m.•10 views

UBUNTU-CVE-2013-1586

The fragmentsettotlen function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service application crash via a malformed packet...

2.9CVSS5.8AI score0.00826EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2013/02/03 1:55 a.m.•24 views

CVE-2013-1581

The dissectpftfecdetailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service loop via a malformed packet...

2.9CVSS6.6AI score0.00728EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2013/02/03 1:00 a.m.•34 views

CVE-2013-1581

The dissectpftfecdetailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service loop via a malformed packet...

2.9CVSS5AI score0.00728EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2013/02/02 12:00 a.m.•2 views

PT-2013-3265

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the fragment set tot len function in epan/reassemble.c due to incorrect determination of the length of a reassembled packet for the...

9.3CVSS0.41744EPSS
SaveExploits36References280
Tenable Nessus
Tenable Nessus
•added 2013/01/24 12:00 a.m.•45 views

RHEL 5 : kernel (RHSA-2012:0358)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0358 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: Using...

7.8CVSS6.6AI score0.05616EPSS
SaveExploits8References16
OSV
OSV
•added 2012/12/21 11:47 a.m.•3 views

DEBIAN-CVE-2012-4444

The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping IPv6 fragments...

5CVSS6.7AI score0.03585EPSS
SaveExploits2References1
Rows per page
Query Builder