Improper Access Control

Oracle Java SE is vulnerable to Improper Access Control vulnerability. This is because GSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A local attacker could possibly use this flaw to cause unauthorized creation, deletion or...

Information Disclosure

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: Multiple flaws were found in the Hotspot and AWT components of OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain...

CVE-2019-10894

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called...

openSUSE Security Update : wireshark (openSUSE-2019-1390)

This update for wireshark to version 2.4.14 fixes the following issues : Security issues fixed : - CVE-2019-10895: NetScaler file parser crash. - CVE-2019-10899: SRVLOC dissector crash. - CVE-2019-10894: GSS-API dissector crash. - CVE-2019-10896: DOF dissector crash. - CVE-2019-10901: LDSS...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2019:1390-1 Rating: moderate References: 1127367 1127369 1127370 1131945 Cross-References: CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10899 CVE-2019-10901 CVE-2019-10903 CVE-2019-9208 CVE-2019-9209...

openSUSE Security Update : wireshark (openSUSE-2019-1356)

This update for wireshark to version 2.4.14 fixes the following issues : Security issues fixed : - CVE-2019-10895: NetScaler file parser crash. - CVE-2019-10899: SRVLOC dissector crash. - CVE-2019-10894: GSS-API dissector crash. - CVE-2019-10896: DOF dissector crash. - CVE-2019-10901: LDSS...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2019:1038-1)

This update for wireshark to version 2.4.14 fixes the following issues : Security issues fixed : CVE-2019-10895: NetScaler file parser crash. CVE-2019-10899: SRVLOC dissector crash. CVE-2019-10894: GSS-API dissector crash. CVE-2019-10896: DOF dissector crash. CVE-2019-10901: LDSS dissector crash...

Wireshark 2.6.x < 2.6.8 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.8 advisory. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was...

Wireshark 3.0.x < 3.0.1 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.0.1 advisory. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was...

Wireshark 2.4.x < 2.4.14 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.4.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.14 advisory. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. Th...

Wireshark 2.4.14, 2.6.8, 3.0.1 Security Updates (Apr 2019) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Wireshark 2.4.14, 2.6.8, 3.0.1 Security Updates (Apr 2019) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Security fix for the ALT Linux 9 package wireshark version 3.0.1-alt1

April 10, 2019 Anton Farygin 3.0.1-alt1 - 3.0.1 - fixes: NetScaler file parser crash. CVE-2019-10895 SRVLOC dissector crash. CVE-2019-10899 IEEE 802.11 dissector infinite loop. CVE-2019-10897 GSUP dissector infinite loop. CVE-2019-10898 Rbm dissector infinite loop. CVE-2019-10900 GSS-API dissecto...

DEBIAN-CVE-2019-10894

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called...

Code injection

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called...

CVE-2019-10894

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called...

CVE-2019-10894

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called...

EUVD-2019-2616

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called...

CVE-2019-10894

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called...

CVE-2019-10894

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called...