193 matches found
SUSE SLED15: libwireshark17 / libwiretap14 / libwsutil15 / wireshark / etc (SUSE-SU-2024:3165-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3165-1 advisory. wireshark was updated from version 3.6.23 to version 4.2.6 jscPED-8517: - Security issues fixed...
Wireshark Multiple Vulnerabilities (Jul 2024) - Linux
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Wireshark Multiple Vulnerabilities (Jul 2024) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Use After Free
Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free through the handling of HTTP/3 requests ...
Malicious code in http3-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5213 Malicious code in http3-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in dmnstnd-http3-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5092 Malicious code in dmnstnd-http3-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
The vulnerability of the HTTP/3 QUIC module (ngx_http_v3_module) in NGINX Plus and NGINX OSS web servers allows a attacker to cause a service failure.
The vulnerability of the HTTP/3 QUIC module ngxhttpv3module in NGINX Plus and NGINX OSS relates to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted HTTP/3 requests...
SUSE CVE-2024-32760
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact...
DEBIAN-CVE-2024-32760
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact...
com.artipie.maven.resolver:maven-resolver-transport-http3 (>=v0.0.1, <=v0.0.9), com.artipie:asto-artipie (>=v1.17.2, <=v1.17.16) +13 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:jetty-http3-common (>=12.0.0, <=12.0.5)
org.eclipse.jetty.http3:jetty-http3-common MAVEN version =12.0.0, =v0.0.1, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =2.0.20, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.5 Source cves: CVE-2024-22201 Source advisory: GHSA-RGGV-CV7R-MW98...
com.artipie.maven.resolver:maven-resolver-transport-http3 (>=v0.0.1, <=v0.0.9), com.artipie:asto-artipie (>=v1.17.2, <=v1.17.16) +13 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:jetty-http3-common (>=12.0.0, <=12.0.5)
org.eclipse.jetty.http3:jetty-http3-common MAVEN version =12.0.0, =v0.0.1, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =2.0.20, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.5 Source cves: CVE-2024-22201 Source advisory: OSV:GHSA-RGGV-CV7R-MW98...
com.artipie.maven.resolver:maven-resolver-transport-http3 (>=v0.0.1, <=v0.0.9), com.artipie:asto-artipie (>=v1.17.2, <=v1.17.16) +13 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:jetty-http3-common (>=12.0.0, <=12.0.5)
org.eclipse.jetty.http3:jetty-http3-common MAVEN version =12.0.0, =v0.0.1, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =v1.17.2, =2.0.20, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.5 Source cves: CVE-2024-22201 Source advisory: MEND:CVE-2024-22201...
SUSE CVE-2024-24989
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...
PT-2024-1647
The affected software is NGINX, specifically the HTTP/3 QUIC module in NGINX Plus and NGINX OSS. When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate, potentially leading to a denial of service, related to a...
SUSE CVE-2024-0207
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...
CVE-2024-0207
A flaw was found in the HTTP3 dissector of Wireshark. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file...
