Wireshark Denial of Service and Code Execution Vulnerabilities-01 (Mar 2014) - Mac OS X

Wireshark is prone to denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Wireshark multiple security vulnerabilities

DoS in NFS and RLC dissectors, buffer overflow on MPEG parsing...

kernel security, bug fix, and enhancement update

kernel 2.6.18-371.6.1.0.1 - i386: fix MTRR code Zhenzhong Duan orabug 15862649 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use...

[ MDVSA-2014:050 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:050 http://www.mandriva.com/en/support/security/ Package : wireshark Date : March 10, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and...

Ubuntu: Security Advisory (USN-2137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux-lts-saucy USN-2137-1

Check for the Version of linux-lts-saucy OpenVAS Vulnerability Test $Id: gbubuntuUSN21371.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux-lts-saucy USN-2137-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program ...

HP-UX PHNE_43706 : s700_800 11.23 Lock Manager cumulative patch

s700800 11.23 Lock Manager cumulative patch : A potential security vulnerability has been identified with HP-UX running NFS rpc.lockd. The vulnerability could be exploited remotely to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and pat...

HP-UX PHNE_43577 : s700_800 11.11 ONC/NFS General Release/Performance Patch

s700800 11.11 ONC/NFS General Release/Performance Patch : A potential security vulnerability has been identified with HP-UX running NFS rpc.lockd. The vulnerability could be exploited remotely to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

kernel: nfs: missing check for buffer length in __nfs4_get_acl_uncached

Buffer overflow in the nfs4getacluncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via a getxattr system call for the system.nfs4acl extended attribut...

CVE-2014-2281

The nfsnamesnoopaddname function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service memory corruption and application crash via a crafte...

CVE-2014-2281

The nfsnamesnoopaddname function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service memory corruption and application crash via a crafte...

UBUNTU-CVE-2014-2281

The nfsnamesnoopaddname function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service memory corruption and application crash via a crafte...

Memory corruption

The nfsnamesnoopaddname function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service memory corruption and application crash via a crafte...

CVE-2014-2281

The nfsnamesnoopaddname function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service memory corruption and application crash via a crafte...

CVE-2014-2281

Wireshark CVE-2014-2281 affects the NFS dissector: nfs_name_snoop_add_name does not validate a certain length value, enabling a remote attacker to trigger memory corruption and a denial of service (application crash). Affected releases are Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6. R...

CVE-2014-2281

The nfsnamesnoopaddname function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service memory corruption and application crash via a crafte...

CVE-2014-2281

The nfsnamesnoopaddname function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service memory corruption and application crash via a crafte...

Wireshark 1.10.x < 1.10.6 Multiple Vulnerabilities

The installed version of Wireshark 1.10.x is a version prior to 1.10.6. It is, therefore, affected by denial of service vulnerabilities in the following dissectors : - NFS dissector CVE-2014-2281 - M3UA dissector CVE-2014-2282 - RLC dissector CVE-2014-2283 Additionally, a flaw exists in the...

Wireshark 1.8.x < 1.8.13 Multiple Vulnerabilities

The installed version of Wireshark 1.8.x is a version prior to 1.8.13. It is, therefore, affected by denial of service vulnerabilities in the following dissectors : - NFS dissector CVE-2014-2281 - RLC dissector CVE-2014-2283 Additionally, a flaw exists in the 'mpegread' function in the MPEG file...

[SECURITY] [DSA 2871-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2871-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 10, 2014 http://www.debian.org/security/faq -...