Wireshark 缓冲区错误漏洞

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A buffer overflow vulnerability...

PT-2020-16425

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.4.0 through 3.4.1 Description The issue is a buffer overflow in the QUIC dissector, allowing for denial of service via packet injection or crafted capture file. Recommendations For Wireshark versions 3.4.0 through 3.4.1,...

CVE-2020-26422: Buffer Copy without Checking Size of Input

Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file...

SUSE SLED15 / SLES15 Security Update : spice-gtk (SUSE-SU-2020:3071-1)

This update for spice-gtk fixes the following issues : CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLES12 Security Update : spice-gtk (SUSE-SU-2020:3085-1)

This update for spice-gtk fixes the following issues : CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLES15 Security Update : spice (SUSE-SU-2020:3070-1)

This update for spice fixes the following issues : CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

Information Disclosure

chromium is vulnerable to information disclosure. An implementation error in QUIC Networking allows an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via a malicious network proxy...

HTTP/3: Ready to Land

Hi, my name is Mike Bishop; I'm the editor of the newest version of HTTP, HTTP/3. I'm part of Foundry, a team at Akamai that focuses on new and emerging technologies that will impact the future of the web. I've been involved in web standards since the early days of HTTP/2, and most of my work has...

Updated spice and spice-gtk packages fix a security vulnerability

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client spice-gtk and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messag...

MGASA-2020-0408 Updated spice and spice-gtk packages fix a security vulnerability

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client spice-gtk and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messag...

DEBIAN-CVE-2020-28030

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement...

UBUNTU-CVE-2020-28030

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement...

RUSTSEC-2020-0067 crate has been renamed to `qp2p`

This crate has been renamed from quic-p2p to qp2p. The new repository location is:...

openSUSE Security Update : spice (openSUSE-2020-1802)

This update for spice fixes the following issues : - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks ...

Wireshark Denial of Service Vulnerability (CNVD-2020-61065)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the GQUIC dissector in Wireshark versions 3.2.0...

Debian DLA-2428-1 : spice-gtk security update

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system. Both the SPICE client spice-gtk and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed...

openSUSE Security Update : spice-gtk (openSUSE-2020-1803)

This update for spice-gtk fixes the following issues : - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package...

[SECURITY] [DLA 2428-1] spice-gtk security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2428-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 01, 2020 https://wiki.debian.org/LTS -...

OPENSUSE-SU-2020:1803-1 Security update for spice-gtk

This update for spice-gtk fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:1802-1 Security update for spice

This update for spice fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. This update was imported from the SUSE:SLE-15-SP2:Update update project...