Lucene search
+L

358 matches found

Tenable Nessus
Tenable Nessus
added 2023/10/05 12:0 a.m.32 views

Amazon Linux 2 : wireshark (ALAS-2023-2267)

The version of wireshark installed on the remote host is prior to 2.6.2-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2267 advisory. BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet...

7.5CVSS7.3AI score0.00486EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2023/09/15 12:0 a.m.20 views

The vulnerability of the bt_quickfix function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00533EPSS
SaveExploits1References11Affected Software5
Tenable Nessus
Tenable Nessus
added 2023/09/09 12:0 a.m.43 views

Fedora 38 : wireshark (2023-abc9ca1e7e)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-abc9ca1e7e advisory. New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513. Tenable has extracted the preceding description...

7.5CVSS7.3AI score0.02771EPSS
SaveExploits3References5
NVD
NVD
added 2023/09/05 7:15 a.m.33 views

CVE-2023-21667

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

6.5CVSS6.4AI score0.00313EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/05 7:15 a.m.31 views

Code injection

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

3.3CVSS6.4AI score0.00313EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/05 6:24 a.m.106 views

CVE-2023-21667

CVE-2023-21667 describes a transient DoS in the Bluetooth HOST when passing a descriptor to validate a blacklisted Bluetooth keyboard. The vulnerability is referenced in Qualcomm’s Bluetooth context (QC-CR#3306293) and appears in multiple feeds (NVD and Red Hat entries) with a base CVSS v3.1 scor...

6.5CVSS6.4AI score0.00313EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/05 6:24 a.m.39 views

CVE-2023-21667 Buffer Over-read in Bluetooth HOST

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

6.5CVSS6.7AI score0.00313EPSS
SaveExploits0References1
Veracode
Veracode
added 2023/08/30 3:57 p.m.31 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists due to the memory leak in the BT SDP dissector, which allows an attacker to cause an application crash via packet injection or crafted capture file...

7.5CVSS7.1AI score0.00486EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
added 2023/08/30 3:57 p.m.39 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists due to the infinite loop in the BT SDP dissector, which allows an attacker to cause an application crash via packet injection or crafted capture file...

7.5CVSS7.1AI score0.00438EPSS
SaveExploits0References7Affected Software1
CNVD
CNVD
added 2023/08/28 12:0 a.m.33 views

Wireshark Denial of Service Vulnerability (CNVD-2023-72254)

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial-of-service vulnerability that originates from an infinite...

5CVSS7AI score0.00438EPSS
SaveExploits0Affected Software2
AlpineLinux
AlpineLinux
added 2023/08/24 7:15 a.m.50 views

CVE-2023-4511

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.3AI score0.00438EPSS
SaveExploits0
Prion
Prion
added 2023/08/24 7:15 a.m.37 views

Input validation

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

5CVSS7.2AI score0.00486EPSS
SaveExploits1References6Affected Software1
AlpineLinux
AlpineLinux
added 2023/08/24 7:15 a.m.35 views

CVE-2023-4513

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.2AI score0.00486EPSS
SaveExploits1
CVE
CVE
added 2023/08/24 6:30 a.m.188 views

CVE-2023-4513

CVE-2023-4513: In Wireshark, the BT SDP dissector has a memory leak that can cause DoS when processing crafted captures or injected packets (affecting 4.0.0–4.0.7 and 3.6.0–3.6.15). Multiple distributions have released fixes (e.g., Wireshark 4.0.8+ in some repos; Debian LTS patched 3.4.16; Mageia...

7.5CVSS6.3AI score0.00486EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2023/08/24 6:30 a.m.34 views

CVE-2023-4511 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

5.3CVSS6.3AI score
SaveExploits0References9
Openbugbounty
Openbugbounty
added 2023/08/12 8:29 a.m.7 views

btcomposites.gr Cross Site Scripting vulnerability OBB-3575672

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
HackRead
HackRead
added 2023/07/14 9:46 p.m.24 views

Teenagers Face Trial for Hacking BT, Nvidia, Rockstar Games, Revolut, Uber

By Waqas Both teenagers, who are on trial in the United Kingdom, have been accused of being associated with the infamous Lapsus$ hacking group. This is a post from HackRead.com Read the original post: Teenagers Face Trial for Hacking BT, Nvidia, Rockstar Games, Revolut, Uber...

7.1AI score
SaveExploits0
Cvelist
Cvelist
added 2023/07/14 4:56 p.m.41 views

CVE-2023-36833 Junos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps

A Use After Free vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202 allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. The process 'aftman-bt' will crash after...

6.5CVSS6.6AI score0.00317EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/10 4:15 p.m.34 views

CVE-2023-2234

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

8.8CVSS7.7AI score0.00497EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/10 4:15 p.m.32 views

Design/Logic Flaw

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

5.8CVSS8.9AI score0.00497EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder