Lucene search
+L

224 matches found

OSV
OSV
added 2024/03/25 3:15 p.m.6 views

AZL-37082 CVE-2024-30202 affecting package emacs for versions less than 29.3-1

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23...

7.8CVSS7.3AI score0.01099EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/03/25 3:15 p.m.34 views

CVE-2024-30202

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23...

7.8CVSS7.2AI score0.01099EPSS
Exploits0References8
Cvelist
Cvelist
added 2024/03/25 12:0 a.m.23 views

CVE-2024-30202

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23...

7AI score0.01099EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/03/25 12:0 a.m.3 views

GNU Emacs 安全漏洞

Gnu emacs is a family of text editors in the American GNU community. A security vulnerability exists in Gnu emacs that stems from the fact that arbitrary Lisp code is evaluated as part of the open Org mode. No details of the vulnerability are provided at this time...

7.8CVSS7.1AI score0.01099EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/03/25 12:0 a.m.6 views

PT-2024-23251 · Org Mode +5 · Org Mode +5

Name of the Vulnerable Software and Affected Versions: Emacs versions prior to 29.3 Org Mode versions prior to 9.6.23 Description: The issue allows arbitrary Lisp code to be evaluated as part of turning on Org mode. Recommendations: For Emacs versions prior to 29.3, update to version 29.3 or late...

9.8CVSS7.8AI score0.01312EPSS
Exploits0References39
FreeBSD
FreeBSD
added 2024/03/24 12:0 a.m.26 views

emacs -- multiple vulnerabilities

GNU Emacs developers report: Emacs 29.3 is an emergency bugfix release intended to fix several security vulnerabilities. Arbitrary Lisp code is no longer evaluated as part of turning on Org mode. This is for security reasons, to avoid evaluating malicious Lisp code. New buffer-local variable...

7.8CVSS7.5AI score0.01099EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/20 12:0 a.m.22 views

Cisco IOS and NX-OS Software Locator/ID Separation Protocol Packet DOS (CVE-2016-1351)

The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service device reload via a crafted header in a packet, aka Bug ID CSCuu64279. This plugin only works with Tenable.ot. Please visit...

7.8CVSS7.4AI score0.03717EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/17 12:0 a.m.4 views

Liblisp Security Vulnerabilities

Liblisp is James personal developer of a lisp interpreter. The library can be written in c99. Liblisp has a security vulnerability that stems from a memory out-of-bounds read problem...

8.1CVSS6.8AI score0.00742EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/11/17 12:0 a.m.4 views

Liblisp Security Vulnerabilities

Liblisp is James personal developer of a lisp interpreter. The library can be written in c99. Liblisp has a security vulnerability that stems from a memory reuse after release problem...

6.5CVSS6.9AI score0.00584EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/11/17 12:0 a.m.6 views

PT-2023-30672 · Liblisp · Liblisp

Name of the Vulnerable Software and Affected Versions: Liblisp versions through commit 4c65969 Description: The issue is related to an out-of-bounds-read vulnerability in the get length function, which is located in the eval.c file and operates on lisp cell t objects. This vulnerability can be...

8.1CVSS8AI score0.00742EPSS
Exploits1References4
Amazon
Amazon
added 2023/10/05 12:0 a.m.49 views

Medium: wireshark

Issue Overview: LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file CVE-2023-1993 Affected Packages: wireshark Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ sectio...

6.5CVSS6.5AI score0.04095EPSS
Exploits1
Veracode
Veracode
added 2023/07/23 7:53 p.m.33 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability results in the LISP dissector going into a large loop which could allow excessive CPU resource consumption via injecting malformed packets...

6.5CVSS6.7AI score0.04095EPSS
Exploits1References13Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/10 12:0 a.m.5 views

The vulnerability of LISP traffic analyzer software in Wireshark allows a hacker to cause a service failure.

The vulnerability of the LISP analyzer in Wireshark for analyzing computer network traffic is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by injecting a specific package or creating a capture file...

7.8CVSS6.4AI score0.04095EPSS
Exploits1References16Affected Software11
Redos
Redos
added 2023/06/20 12:0 a.m.26 views

ROS-20230620-04

The vulnerability of the traffic analysis program Wireshark is related to the failure to properly control the consumption of internal resources in the LISP dissector. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause resource exhaustion and perform a...

7.5CVSS6.7AI score0.0462EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2023/06/08 12:0 a.m.34 views

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-199)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-199 advisory. RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file CVE-2023-1992 LISP dissector large loop in Wiresha...

7.5CVSS7AI score0.0462EPSS
Exploits3References8
ALT Linux
ALT Linux
added 2023/05/09 12:0 a.m.188 views

Security fix for the ALT Linux 10 package wireshark version 4.0.5-alt1

4.0.5-alt1 built May 9, 2023 Anton Farygin in task 319886 May 4, 2023 Anton Farygin - 4.0.5 - Fixes: CVE-2023-1994 GQUIC dissector crash. CVE-2023-1993 LISP dissector large loop. CVE-2023-1992 RPCoRDMA dissector crash. CVE-2023-1161 ISO 15765 and ISO 10681 dissector crash...

7AI score0.0462EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2023/05/01 12:0 a.m.26 views

Debian dla-3402 : libwireshark-data - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3402 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3402-1 [email protected]...

7.5CVSS7.1AI score0.0462EPSS
Exploits3References10
OpenVAS
OpenVAS
added 2023/05/01 12:0 a.m.20 views

Debian: Security Advisory (DLA-3402-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.0462EPSS
Exploits3References4
Debian
Debian
added 2023/04/29 6:58 p.m.40 views

[SECURITY] [DLA 3402-1] wireshark security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3402-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 29, 2023 https://wiki.debian.org/LTS -...

7.5CVSS7.9AI score0.0462EPSS
Exploits3
OSV
OSV
added 2023/04/28 11:5 a.m.6 views

OESA-2023-1260 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging...

7.5CVSS6.8AI score0.0462EPSS
Exploits3References4
Rows per page
Query Builder