OPENSUSE-SU-2019:2217-1 Security update for djvulibre

This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM imag...

PT-2019-5677

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the dccp print option function of the DCCP parser in tcpdump, which can be exploited by a remote attacker to cause a denial of service. The dccp print...

CVE-2018-16229

The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccpprintoption...

CVE-2018-14470

The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2...

CVE-2018-16230

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpattrprint MPREACHNLRI...

UBUNTU-CVE-2018-14880

The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6printlshdr...

UBUNTU-CVE-2018-16230

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpattrprint MPREACHNLRI...

Security update for djvulibre (moderate)

openSUSE Security Update: Security update for djvulibre Announcement ID: openSUSE-SU-2019:2219-1 Rating: moderate References: 1146569 1146571 1146572 1146702 Cross-References: CVE-2019-15142 CVE-2019-15143 CVE-2019-15144 CVE-2019-15145 Affected Products: openSUSE Leap 15.1 An update that fixes fo...

PT-2019-4780

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the OSPFv3 parser, specifically in the ospf6 print lshdr function in print-ospf6.c. This can be exploited by a remote attacker to cause a denial of...

PT-2019-4099

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to insufficient input validation in the tcpdump utility, which can be exploited by a remote attacker to gain unauthorized access to information and compromise its integrity and...

CVE-2018-14469

The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1nprint...

CVE-2018-14882

The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c...

CVE-2018-14463

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 2, a different vulnerability than CVE-2019-15167...

openSUSE Security Update : djvulibre (openSUSE-2019-2217)

This update for djvulibre fixes the following issues : Security issues fixed : - CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM...

CVE-2018-14461

The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint...

PT-2019-5679

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the bgp capabilities print function in print-bgp.c, which can cause a denial of service. This can be exploited by a remote attacker. The bgp capabilities...

PT-2019-5673

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the Babel parser of tcpdump, specifically in the babel print v2 function in print-babel.c. This can lead to a denial of service. The problem is also...

PT-2019-14020

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue concerns a buffer over-read in the VRRP parser for VRRP version 3, which occurs in the vrrp print function in print-vrrp.c. Additionally, there is a heap-based buffer over-read related to a...

PT-2019-16672

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 RSA BSAFE Crypto-C Micro Edition version 4.1.4 RSA BSAFE Micro Edition Suite versions prior to 4.0.13 RSA BSAFE Micro Edition Suite versions prior to 4.4 Description The issue is relat...

PT-2019-4783

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to the BGP parser in tcpdump, which allows stack consumption due to unlimited recursion in the bgp attr print function. This can lead to a denial of service. The problem is also...