1673 matches found
NewStart CGSL MAIN 6.02 : spice-gtk Vulnerability (NS-SA-2021-0075)
The remote NewStart CGSL host, running version MAIN 6.02, has spice-gtk packages installed that are affected by a vulnerability: - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE clien...
EulerOS Virtualization 3.0.2.6 : spice (EulerOS-SA-2021-1451)
According to the version of the spice packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before...
OESA-2021-1082 spice security update
The SPICE package provides the SPICE server library and client. These components are used to provide access to a remote machine's display and devices. Security Fixes: Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before...
EulerOS Virtualization 3.0.6.6 : spice-gtk (EulerOS-SA-2021-1519)
According to the versions of the spice-gtk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system,...
EulerOS 2.0 SP2 : spice (EulerOS-SA-2021-1361)
According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...
CVE-2020-24944
picoquic before 3rd of July 2020 allows attackers to cause a denial of service infinite loop via a crafted QUIC frame, related to the picoquicdecodeframes and picoquicdecodestreamframe functions and epoch==3...
Design/Logic Flaw
picoquic before 3rd of July 2020 allows attackers to cause a denial of service infinite loop via a crafted QUIC frame, related to the picoquicdecodeframes and picoquicdecodestreamframe functions and epoch==3...
CVE-2020-24944
Picoquic (before 2020-07-03) contains a denial-of-service vulnerability where a crafted QUIC frame triggers an infinite loop. The issue is tied to the decode logic in picoquic_decode_frames and picoquic_decode_stream_frame when epoch==3. The confirmed impact is partial availability (per CVSSv2/v3...
CVE-2020-24944
picoquic before 3rd of July 2020 allows attackers to cause a denial of service infinite loop via a crafted QUIC frame, related to the picoquicdecodeframes and picoquicdecodestreamframe functions and epoch==3...
EulerOS 2.0 SP5 : spice (EulerOS-SA-2021-1232)
According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...
EulerOS 2.0 SP5 : spice-gtk (EulerOS-SA-2021-1233)
According to the versions of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before...
CentOS 8 : spice and spice-gtk (CESA-2020:4186)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4186 advisory. - spice: multiple buffer overflow vulnerabilities in QUIC decoding code CVE-2020-14355 Note that Nessus has not tested for this issue but has instead relied onl...
NICER Protocol Deep Dive: Internet Exposure of HTTP and HTTPS
Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...
EulerOS 2.0 SP3 : spice (EulerOS-SA-2021-1121)
According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...
EulerOS 2.0 SP3 : spice-gtk (EulerOS-SA-2021-1122)
According to the versions of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious...
Wireshark 3.4.x < 3.4.2 A Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 3.4.2. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.2 advisory. - Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted...
Wireshark 3.4.x < 3.4.2 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.4.2. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.2 advisory. - Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or...
Wireshark Buffer Overflow Vulnerability (CNVD-2021-07124)
Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A buffer overflow vulnerability...
