12685 matches found
DEBIAN-CVE-2018-9988
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverkeyexchange that could cause a crash on invalid input...
DEBIAN-CVE-2018-9989
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverpskhint that could cause a crash on invalid input...
CVE-2018-9988
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverkeyexchange that could cause a crash on invalid input...
Input validation
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverpskhint that could cause a crash on invalid input...
CVE-2018-9989
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverpskhint that could cause a crash on invalid input...
CVE-2018-9989
CVE-2018-9989 affects ARM mbed TLS pre-2.1.11, pre-2.7.2, and pre-2.8.0, with a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input. The issue is documented across multiple advisories; Debian LTS/DLA-2826 notes fixes in mbedtls 2.4.2-1+deb9u4 for Debian 9, an...
CVE-2018-9989
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverpskhint that could cause a crash on invalid input...
CVE-2018-9988
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverkeyexchange that could cause a crash on invalid input...
CVE-2018-9988
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverkeyexchange that could cause a crash on invalid input...
CVE-2018-9988
CVE-2018-9988 affects ARM mbed TLS prior to 2.1.11, 2.7.2, and 2.8.0, with a buffer over-read in ssl_parse_server_key_exchange that could cause a crash on invalid input. Public-branch fixes exist in newer mbed TLS releases, and downstream advisories (e.g., Debian DLA-2826-1) note updates to mitig...
tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...
tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...
tcpdump: Buffer over-read in util-print.c:tok2strbuf()
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf...
tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...
tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser
The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpkirtrpduprint...
tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...
Debian DLA-1343-1 : ming security update
Multiple vulnerabilities have been discovered in Ming : CVE-2018-6358 Heap-based buffer overflow vulnerability in the printDefineFont2 function util/listfdb.c. Remote attackers might leverage this vulnerability to cause a denial of service via a crafted swf file. CVE-2018-7867 Heap-based buffer...
tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6optprint...
tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser
The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6print...