PT-2023-5502 · Nvidia · Nvidia Cumulus Linux

Name of the Vulnerable Software and Affected Versions: NVIDIA Cumulus Linux affected versions not specified Description: The issue is related to a vulnerability in the neighmgrd and nlmanager components of NVIDIA Cumulus Linux. An attacker on an adjacent network may cause an uncaught exception by...

Oracle Linux 5 : wireshark (ELSA-2007-0710)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0710 advisory. 0.99.6-1.el5.01 - Added patch for OCFS2 formatting 0.99.6-1 - upgrade to 0.99.6 - Wireshark could crash when dissecting an HTTP chunked response -...

CVE-2023-39268

A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...

Aruba Networks ArubaOS 缓冲区错误漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS Switch that originates from unauthenticated remote code execution via...

Stormshield Network Security 安全漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. Stormshield Network Security suffers from a security vulnerability that stems from SNS's tendency to cause system crashes when analyzing and building on specially crafted...

The vulnerability of the IS-IS routing protocol implementation in the Cisco NX-OS operating system allows a hacker to perform a reboot of the device. This vulnerability is present in Cisco Nexus series 3000 and 9000 switches.

The vulnerability of the IS-IS routing protocol implementation in the Cisco NX-OS operating system for Cisco Nexus 3000 and 9000 switches is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to perform a reboot of the device by sending specially...

UBUNTU-CVE-2023-4513

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

Wireshark 安全漏洞

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial-of-service vulnerability that originates from an infinite...

PT-2023-5122 · Wireshark +4 · Wireshark +4

Name of the Vulnerable Software and Affected Versions: Wireshark versions 4.0.0 through 4.0.6 Description: The issue is caused by an uncontrolled recursion in the traffic analyzer, which can be exploited by a remote attacker to cause a denial of service. This can be achieved via packet injection ...

PT-2023-4615 · Wireshark +3 · Wireshark +3

Name of the Vulnerable Software and Affected Versions: Wireshark versions 2.0.0 through 4.0.7 Description: The issue is related to a divide by zero error in the CP2179 component of Wireshark, which can be exploited by a remote attacker to cause a denial of service. This occurs due to a failure in...

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

CVE-2023-3346 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service DoS condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is...

Moxa TN-5900 and MGate Gateways Missing Release of Memory after Effective Lifetime (CVE-2021-46082)

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a memory leak which allows attackers to cause a Denial of Service DoS via crafted packets. This plugin only works with Tenable.ot. Please visi...

The vulnerability of Mitsubishi Electric’s M8V, M8, C80, and IoT Unit series controllers’ microprogramming software lies in the fact that the operation output goes beyond the buffer in memory. This allows a hacker to cause a malfunction in the device or execute arbitrary code.

The vulnerability of Mitsubishi Electric’s M8V, M8, C80, and IoT Unit microcontroller software lies in the fact that the operation data is stored outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause malfunctions in the device, or execute arbitrary code by...

MikroTik RouterOS <= 6.40.5 DoS Vulnerability

MikroTik RouterOS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-33308

A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy...

CVE-2023-33308

A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy...

Stack overflow

A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy...

CVE-2023-33308

A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy...

CVE-2023-33308

A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy...