489 matches found
CVE-2019-17147
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Hos...
EulerOS 2.0 SP3 : libpcap (EulerOS-SA-2019-2612)
According to the version of the libpcap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.CVE-2019-15165 Note that Tenable...
Debian DLA-1967-1 : libpcap security update
libpcap Packet CAPture, a low-level network monitoring library, does not properly validate the PHB header length before allocating memory. This update added sanity checks for PHB header length. For Debian 8 'Jessie', this problem has been fixed in version 1.6.2-2+deb8u1. We recommend that you...
Security update for libpcap (important)
openSUSE Security Update: Security update for libpcap Announcement ID: openSUSE-SU-2019:2345-1 Rating: important References: 1153332 Cross-References: CVE-2018-16301 CVE-2019-15165 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...
DEBIAN-CVE-2019-15165
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory...
CVE-2019-15165
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory...
ALPINE-CVE-2019-15165
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory...
CVE-2019-15165
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory...
UBUNTU-CVE-2019-15165
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory...
DEBIAN-CVE-2019-16410
An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of headerlen checking...
UBUNTU-CVE-2019-16410
An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of headerlen checking...
Fedora 30 : mod_http2 (2019-63ba15cc83) (0-Length Headers Leak) (Data Dribble) (Internal Data Buffering)
Rebuilt with newer nghttp2 ---- This update includes the latest upstream release of modhttp2, version 1.15.3. Upstream changes include : - fixes Timeout vs. KeepAliveTimeout behaviour, see PR 63534. - Fixes stream cleanup when connection throttling is in place. - Counts stream resets by client on...
CVE-2018-14318
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User interaction is required to exploit this vulnerability in that the target must have their cellular radios enabled. The specific flaw exists within the handling ...
PT-2018-3814
Name of the Vulnerable Software and Affected Versions libpcap versions prior to 1.9.1 Description The issue is related to the sf-pcapng.c component in the libpcap library, which does not properly validate the PHB header length before allocating memory. This allows a remote attacker to impact data...
Regular Expression Denial of Service in tough-cookie
Affected versions of tough-cookie are susceptible to a regular expression denial of service. The amplification on this vulnerability is relatively low - it takes around 2 seconds for the engine to execute on a malicious input which is 50,000 characters in length. If node was compiled using the...
PSF-2018-8 Email folding function Denial-of-Service
The email folding function enters an infinite loop if a header is longer than the policy maximum line length and contains many non-ASCII characters. Regression introduced in Python 3.6.4...
UBUNTU-CVE-2017-14165
The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c...
DEBIAN-CVE-2017-14165
The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c...
