SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:2555-1)

This update for wireshark to version 2.2.9 fixes several issues. These security issues were fixed : - CVE-2017-13767: The MSDP dissector could have gone into an infinite loop. This was addressed by adding length validation bsc1056248. - CVE-2017-13766: The Profinet I/O dissector could have crash...

Wireshark 'Profinet I/O' Dissector DoS Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark 'Profinet I/O' Dissector DoS Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Siemens 7KM PAC Switched Ethernet Denial of Service Vulnerability

7KM PAC Switched Ethernet is a switched Ethernet device from Siemens, Germany. A denial of service vulnerability exists in the 7KM PAC Switched Ethernet PROFINET Extension Module versions prior to 2.1.3, which allows an attacker to trigger a denial of service condition via specially crafted...

Wireshark 2.4.x < 2.4.1 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.1 advisory. - In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This...

Wireshark 2.2.x < 2.2.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.2.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.9 advisory. - In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This...

Wireshark Profinet I/O Parser Denial of Service Vulnerability

Wireshark is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the Wireshark Profinet I/O parser allows an attacker to exploit the vulnerability to submit a special request for a denial-of-service attack...

CVE-2017-9945

In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module All versions V2.1.3, a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet Layer 2 broadcast. The affected component requires a manual restart via the main device to...

CVE-2017-9945

In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module All versions V2.1.3, a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet Layer 2 broadcast. The affected component requires a manual restart via the main device to...

Design/Logic Flaw

In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module All versions V2.1.3, a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet Layer 2 broadcast. The affected component requires a manual restart via the main device to...

CVE-2017-9945

In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module All versions V2.1.3, a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet Layer 2 broadcast. The affected component requires a manual restart via the main device to...

CVE-2017-9945

Siemens 7KM PAC Switched Ethernet PROFINET expansion module (versions before V2.1.3) is affected by CVE-2017-9945. A Denial-of-Service can be triggered by a specially crafted PROFINET DCP packet sent on Layer 2 broadcast, requiring a manual restart of the main device to recover. Impact is a DoS/N...

CVE-2017-13766

In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation...

Siemens Fixes Session Hijacking Bug in LOGO!, Warns of Man-in-the-Middle Attacks

Administrators who have Siemens’ LOGO! logic module deployed in automation setups are being urged to update its firmware. The German industrial manufacturing giant pushed out an update for its LOGO! 8 BM devices Wednesday morning to fix a vulnerability CVE-2017-12734 that could let an attacker...

Out-of-bounds

In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation...

ALPINE-CVE-2017-13766

In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation...

CVE-2017-13766

In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation...

CVE-2017-13766

In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation...

DEBIAN-CVE-2017-13766

In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation...

UBUNTU-CVE-2017-13766

In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation...