EulerOS 2.0 SP10 : kernel (EulerOS-SA-2023-2357)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in tableclear in drivers/md/dm-ioctl....

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2023-2383)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel through 6.3.1, a use-after-free in Netfilter nftables when processing batch requests can be abused to perform arbitrary read a...

The vulnerability of the HNAP1 protocol implementation in the microprogramming-based router software of D–Link DIR-823G allows a attacker to cause a service failure.

The vulnerability of the HNAP1 protocol implementation in the microprogrammed software for D–Link DIR-823G routers is related to the escape operation from the buffer boundaries in memory when processing the SetParentsControlInfo parameter. Exploiting this vulnerability allows a remote attacker to...

PT-2023-8308 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. The specific flaw exists within the prog.cgi binary,...

Debian: Security Advisory (DSA-5429-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5429-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5429-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 15, 2023 https://www.debian.org/security/faq -...

D-Link DIR-846 安全漏洞

The D-Link DIR-846 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-846 v1.00A52, which originates from allowing malicious commands to be injected via the tomographypingaddress parameter in the HNAP1 interface...

Wireshark Buffer Overflow Vulnerability (CNVD-2023-62290)

Wireshark is open source network protocol analysis software for troubleshooting network failures and other problems. The software runs on multiple platforms, captures network packets, and can parse multiple protocols. Wireshark has a security vulnerability that can be exploited by attackers to...

Wireshark Buffer Overflow Vulnerability (CNVD-2023-43872)

Wireshark is a free, open-source network protocol analyzer that helps users capture and analyze network packets.Wireshark can be used for a variety of purposes such as network troubleshooting, security auditing, etc. It is a very useful network tool. Wireshark has a security vulnerability. The...

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-878 microprogrammable router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-878 microprogrammed router software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protecte...

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microsoftware allows a attacker to execute arbitrary code.

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microprogramming software is related to the lack of measures to sanitize input data during the processing of the LocalIPAddress parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microsoftware allows a attacker to execute arbitrary code.

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microprogramming software is related to the lack of measures to sanitize input data during the processing of the PrefixLen parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

golang: net/http: handle server errors after sending GOAWAY

A flaw was found in the golang package. In net/http in Go, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if a fatal error preempts the shutdown...

The vulnerability in the implementation of the Windows SMB network protocol of the Microsoft operating system allows a perpetrator to carry out a DoS attack.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute a DoS attack...

Moderate: Red Hat Security Advisory: wireshark security and bug fix update

An update for wireshark is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Moderate: wireshark security and bug fix update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: f5ethtrailer Infinite loop in legacy style dissector CVE-2022-3190 For more details about the security issues, including the impact, a CVSS...

ALSA-2023:2373 Moderate: wireshark security and bug fix update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: f5ethtrailer Infinite loop in legacy style dissector CVE-2022-3190 For more details about the security issues, including the impact, a CVSS...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to disclose sensitive information and also cause service failures.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, as well as cause service failures...

The vulnerability of the SLP implementation lies in the insufficient control over the amount of network messages transmitted. This allows a malicious actor, operating remotely, to cause a service failure by registering arbitrary services to create fake UDP traffic.

The vulnerability of the SLP location determination protocol is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability allows a malicious actor to cause service failures by registering arbitrary services to create fake UDP traffic...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows a perpetrator to cause a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures using the T3 network...