332 matches found
CVE-2024-8250 Expired Pointer Dereference in Wireshark
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...
CVE-2024-8250 Expired Pointer Dereference in Wireshark
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...
CVE-2024-8250
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...
CVE-2024-8250 Expired Pointer Dereference in Wireshark
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...
Wireshark 4.2.x < 4.2.7 A Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 4.2.7. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.7 advisory. - NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or...
KLA73913 DoS vulnerability in Wireshark
Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-11 · NTLMSSP dissector crash Exploitation Public exploits exist for this vulnerability. Related products Wireshark CVE list...
Wireshark 4.0.x < 4.0.17 A Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 4.0.17. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.0.17 advisory. - NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection o...
Wireshark 4.2.x < 4.2.7 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.2.7. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.7 advisory. - NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet...
Wireshark 4.0.x < 4.0.17 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.17. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.0.17 advisory. - NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet...
ROS-20240813-01
The vulnerability of the nftsetrbtree function net/netfilter/nftsetrbtree.c of the Netfilter component of the Linux operating system is related to the operation exceeding the memory buffer boundaries. component of the Netfilter component of the Linux operating system is related to an operation...
CVE-2023-52440
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...
CVE-2023-52440
The CVE-2023-52440 vulnerability concerns ksmbd in the Linux kernel where a slub overflow can occur during key exchange if authblob->SessionKey.Length exceeds CIFS_KEY_SIZE. The root cause is in ksmbd_decode_ntlmssp_auth_blob() and the subsequent copy to the session key array via cifs_arc4_cry...
CVE-2023-52440
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...
kernel: cifs: Fix memory leak when build ntlmssp negotiate blob failed
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory leak when build ntlmssp negotiate blob failed There is a memory leak when mount cifs: unreferenced object 0xffff888166059600 size 448: comm "mount.cifs", pid 51391, jiffies 4295596373 age 330.596s hex dump first ...
Oracle Linux 8 : samba (ELSA-2020-1878)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1878 advisory. - resolves: 1791209 - Fix CVE-2019-14907 - resolves: 1764469 - Fix CVE-2019-10218 - resolves: 1746241 - Fix CVE-2019-10197 Tenable has extracted the...
Oracle Linux 7 : samba (ELSA-2020-3981)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3981 advisory. - resolves: 1791208 - Fix CVE-2019-14907 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...
Oracle Linux 8 : gssntlmssp (ELSA-2023-3097)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-3097 advisory. - Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields - Fix CVE-2023-25564: memory corruption when decoding UTF16 strings - Fix...
AlmaLinux 8 : gssntlmssp (ALSA-2023:3097)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:3097 advisory. - GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when...
Denial Of Service (DoS)
gss-ntlmssp is vulnerable to Denial Of Service DoS. The vulnerability exists because of the incorrect free when decoding target information, which leads to an application crash via the main gssacceptseccontext entry point...
Denial Of Service (DoS)
gss-ntlmssp is vulnerable to Denial Of Service DoS. The vulnerability exists because of a memory leak when parsing usernames to the domain portion of a username, which overrides the allocated memory area of the size of the domain name via the main gssacceptseccontext entry point, leading to an...