Lucene search
+L

238 matches found

CNVD
CNVD
•added 2020/12/14 12:00 a.m.•69 views

Wireshark Denial of Service Vulnerability (CNVD-2021-11319)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. Wireshark has a denial of service...

5.3CVSS8.1AI score0.0255EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/11 7:15 p.m.•19 views

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

5.3CVSS5.3AI score0.0255EPSS
SaveExploits1References8
osv_debian
osv_debian
•added 2020/12/11 7:15 p.m.•16 views

DEBIAN-CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

5.3CVSS6.2AI score0.0255EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/12/11 7:15 p.m.•32 views

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

5.3CVSS6.9AI score
SaveExploits0References8
Prion
Prion
•added 2020/12/11 7:15 p.m.•34 views

Design/Logic Flaw

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

5CVSS5.6AI score0.0255EPSS
SaveExploits1References8Affected Software4
AlpineLinux
AlpineLinux
•added 2020/12/11 5:25 p.m.•95 views

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

5.3CVSS5.8AI score0.0255EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/12/11 5:25 p.m.•62 views

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

5.3CVSS6.1AI score0.0255EPSS
SaveExploits1
Mend
Mend
•added 2020/12/11 5:25 p.m.•5 views

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

5.3CVSS0.0255EPSS
SaveExploits1References14
Cvelist
Cvelist
•added 2020/12/11 5:25 p.m.•47 views

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

4.2CVSS5.7AI score0.0255EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/11 12:00 a.m.•7 views

CVE-2020-26421: Out-of-bounds Read

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

5.3CVSS5.7AI score0.0255EPSS
SaveExploits1References2
Veracode
Veracode
•added 2020/12/10 4:47 p.m.•37 views

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. A USB HID dissector crash allows an attacker to crash the application...

5.3CVSS2.7AI score0.0255EPSS
SaveExploits1References12Affected Software1
Kaspersky
Kaspersky
•added 2020/12/09 12:00 a.m.•156 views

KLA12081 DoS vulnerabilities in Wireshark

DoSvulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. DoS vulnerability in the Kafka dissector can be exploited via special crafted file to cause denial of service. 2. DoS...

6.3AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2020/10/24 11:30 a.m.•145 views

AutoGadgetFS - USB Testing Made Easy

What’s AutoGadgetFS ? AutoGadgetFS is an open source framework that allows users to assess USB devices and their associated hosts/drivers/software without an in-depth knowledge of the USB protocol. The tool is written in Python3 and utilizes RabbitMQ and WiFi access to enable researchers to condu...

7.4AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/10/02 4:33 p.m.•36 views

Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration

Impact 1 If an application is making use of the deprecated kit protocol HALs as the communication channel to the target device an attacker can masquerade as a device and return malformed packets of arbitrary length which the protocol stack will write to the stack. HALs intended for production use...

1.3AI score
SaveExploits0References2Affected Software1
Prion
Prion
•added 2020/08/21 9:15 p.m.•34 views

Buffer overflow

NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and...

7.2CVSS7.8AI score0.00674EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2020/08/21 8:30 p.m.•44 views

CVE-2020-9063

NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and...

7.8AI score0.00674EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2020/08/21 12:00 a.m.•4 views

PT-2020-20466

Name of the Vulnerable Software and Affected Versions NCR SelfServ ATMs running APTRA XFS versions 05.01.00 and earlier Description The issue concerns a lack of authentication and integrity protection in USB HID communications between the currency dispenser and the host computer. This allows an...

7.6CVSS0.00674EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/21 12:00 a.m.•9 views

CVE-2020-9063: Buffer Copy without Checking Size of Input

NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and...

7.6CVSS6.6AI score0.00674EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2020/06/17 5:15 p.m.•25 views

CVE-2020-9332

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device...

7.8CVSS5.8AI score0.00496EPSS
SaveExploits1References2
NVD
NVD
•added 2020/06/17 5:15 p.m.•53 views

CVE-2020-9332

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device...

7.8CVSS0.00496EPSS
SaveExploits1References2
Rows per page
Query Builder