467 matches found
wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector
A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...
wireshark security update
4.4.2-10.0.1.el102.8 - Fix post script to not fail during initial installation Orabug: 37565359 1:4.4.2-10.8 - Fix Heap-based Buffer Overflow in Wireshark CVE-2026-95389 - Resolves: RHEL-272823 1:4.4.2-10.7 - Fix DoS via heap-based buffer overflow in SPDY dissector CVE-2026-95387 - Resolves:...
io.netty/netty-codec-http: Netty: Denial of Service via unbounded SPDY concurrent streams
A flaw was found in Netty. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exhausting server memory. Because the SPDY session handler does not restrict the number of concurrent streams initiated by a remote peer, an attacker can transmit an excessive volume of stre...
io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streams
A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAXVALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYNSTREAM...
wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector
A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...
wireshark security update
1:3.4.10-10.4 - Fix DoS via heap-based buffer overflow in SPDY dissector CVE-2026-95387 - Resolves: RHEL-272330 1:3.4.10-9.4 - Fix DoS vulnerability in H.245 protocol dissector CVE-2026-76927 - Resolves: RHEL-257656 1:3.4.10-9.3 - Fix DoS vulnerability in ESS protocol dissector CVE-2026-76919 -...
RHEL 9 : wireshark (RHSA-2026:83546)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83546 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security...
Oracle Linux 9 : wireshark (ELSA-2026-83546)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83546 advisory. - Fix DoS via heap-based buffer overflow in SPDY dissector CVE-2026-95387 - Fix DoS vulnerability in H.245 protocol dissector CVE-2026-76927 - Fix DoS...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.
Summary spdystream is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-35469. Vulnerability Details CVEID:CVE-2026-35469 DESCRIPTION: spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame...
io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing
A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service DoS...
netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification
A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to...
OESA-2026-4230 wireshark security update
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fixes: SPDY...
OESA-2026-4228 wireshark security update
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fixes: SPDY...
OESA-2026-4227 wireshark security update
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fixes: SPDY...
Linux Distros Unpatched Vulnerability : CVE-2026-95387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-95387 Note that Nessus relies on the presence of the packa...
SUSE CVE-2026-95387
SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95387
A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...
CVE-2026-95387
SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
