251 matches found
Cisco IOS and NX-OS Software Locator/ID Separation Protocol Packet DOS (CVE-2016-1351)
The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service device reload via a crafted header in a packet, aka Bug ID CSCuu64279. This plugin only works with Tenable.ot. Please visit...
PT-2023-30672 · Liblisp · Liblisp
Name of the Vulnerable Software and Affected Versions: Liblisp versions through commit 4c65969 Description: The issue is related to an out-of-bounds-read vulnerability in the get length function, which is located in the eval.c file and operates on lisp cell t objects. This vulnerability can be...
Liblisp Security Vulnerabilities
Liblisp is James personal developer of a lisp interpreter. The library can be written in c99. Liblisp has a security vulnerability that stems from a memory out-of-bounds read problem...
Liblisp Security Vulnerabilities
Liblisp is James personal developer of a lisp interpreter. The library can be written in c99. Liblisp has a security vulnerability that stems from a memory reuse after release problem...
Medium: wireshark
Issue Overview: LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file CVE-2023-1993 Affected Packages: wireshark Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ sectio...
Denial Of Service (DoS)
wireshark is vulnerable to Denial Of Service DoS. The vulnerability results in the LISP dissector going into a large loop which could allow excessive CPU resource consumption via injecting malformed packets...
The vulnerability of LISP traffic analyzer software in Wireshark allows a hacker to cause a service failure.
The vulnerability of the LISP analyzer in Wireshark for analyzing computer network traffic is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by injecting a specific package or creating a capture file...
ROS-20230620-04
The vulnerability of the traffic analysis program Wireshark is related to the failure to properly control the consumption of internal resources in the LISP dissector. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause resource exhaustion and perform a...
Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-199)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-199 advisory. RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file CVE-2023-1992 LISP dissector large loop in Wiresha...
Security fix for the ALT Linux 10 package wireshark version 4.0.5-alt1
4.0.5-alt1 built May 9, 2023 Anton Farygin in task 319886 May 4, 2023 Anton Farygin - 4.0.5 - Fixes: CVE-2023-1994 GQUIC dissector crash. CVE-2023-1993 LISP dissector large loop. CVE-2023-1992 RPCoRDMA dissector crash. CVE-2023-1161 ISO 15765 and ISO 10681 dissector crash...
Debian dla-3402 : libwireshark-data - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3402 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3402-1 [email protected]...
Debian: Security Advisory (DLA-3402-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3402-1] wireshark security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3402-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 29, 2023 https://wiki.debian.org/LTS -...
OESA-2023-1260 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging...
Fedora 37 : wireshark (2023-7af3ad9ffe)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7af3ad9ffe advisory. New version 4.0.5. Fixes Bug 2159392, CVE-2023-1992, CVE-2023-1993 and CVE-2023-1994. Tenable has extracted the preceding description block directly...
Fedora 38 : wireshark (2023-f70fbf64cb)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f70fbf64cb advisory. New version 4.0.5. Fixes Bug 2159392, CVE-2023-1992, CVE-2023-1993 and CVE-2023-1994. Tenable has extracted the preceding description block directly...
SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2023:1931-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1931-1 advisory. - CVE-2023-1992: Fixed RPCoRDMA dissector crash bsc1210405. - CVE-2023-1993: Fixed LISP dissecto...
Wireshark Security Multiple DoS Vulnerabilities (Apr 2023) - Mac OS X
Wireshark is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wireshark LISP Parser Denial of Service Vulnerability
Wireshark is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display the detailed data for analysis. Wireshark suffers from a denial of service vulnerability that stems from not properly handling incoming error...
