CVE-2020-29394

A buffer overflow in the dltfilterload function in dltcommon.c from dlt-daemon through 2.18.5 GENIVI Diagnostic Log and Trace allows arbitrary code execution because fscanf is misused no limit on the number of characters to be read in the format argument...

Linux Distros Unpatched Vulnerability : CVE-2022-39836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes...

Linux Distros Unpatched Vulnerability : CVE-2022-39837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes...

CVE-2024-23962

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DLT interface, which listens on TCP port 3490 by default. The issue...

The vulnerability of the tcpedit_dlt_cleanup() function in the PCAP-file editor tcprewrite, a utility for editing and replaying PCAP files, allows a malicious actor to cause a service failure.

The vulnerability of the tcpeditdltcleanup function in the PCAP-file editor tcprewrite, as well as in the PCAP-file editing and playback utilities Tcpreplay, is related to an uncontrolled and exploitable flaw. Exploiting this vulnerability could allow a malicious actor to cause service...

CVE-2024-23962 Alpine Halo9 Missing Authentication

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DLT interface, which listens on TCP port 3490 by default. The issue...

Debian: Security Advisory (DLA-3845-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3845-1] dlt-daemon security update

Debian LTS Advisory DLA-3845-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 27, 2024 https://wiki.debian.org/LTS Package : dlt-daemon Version : 2.18.0-1+deb10u2 CVE ID : CVE-2022-39836 CVE-2022-39837 CVE-2023-26257 CVE-2023-36321 Several flaws were...

Debian dla-3845 : dlt-daemon - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3845 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3845-1 [email protected]...

(Pwn2Own) Alpine Halo9 Missing Authentication Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DLT interface, which listens on TCP port 3490 by default. The issue...

PT-2024-20204 · Alpine · Alpine Halo9

Name of the Vulnerable Software and Affected Versions: Alpine Halo9 devices affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists...

OPENSUSE-SU-2024:13264-1 dlt-daemon-2.18.10-1.1 on GA media

These are all security issues fixed in the dlt-daemon-2.18.10-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2024-2397

Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLTPPPSERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21...

UBUNTU-CVE-2023-4256

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpeditdltcleanup function within plugins/dltplugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a...

PT-2023-28428 · Grafana +3 · Grafana +3

Name of the Vulnerable Software and Affected Versions: tcpreplay versions affected versions not specified Grafana versions prior to 10.1.4 Description: A double free vulnerability has been identified in the tcpedit dlt cleanup function within plugins/dlt plugins.c of tcpreplay's tcprewrite. This...

tcpreplay security breach

Appneta Tcpreplay is a set of open source utilities for editing and replaying network traffic on UNIX-based operating systems from Appneta, Inc. A security vulnerability exists in tcpreplay, which is caused by a double release in the tcpeditdltcleanup function within plugins/dltplugins.c. The...

CVE-2023-36321

Connected Vehicle Systems Alliance COVESA up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dltcommon.c...

DEBIAN-CVE-2023-36321

Connected Vehicle Systems Alliance COVESA up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dltcommon.c...

CVE-2023-36321

Connected Vehicle Systems Alliance COVESA up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dltcommon.c...

PT-2023-25534 · Covesa +1 · Covesa +1

Name of the Vulnerable Software and Affected Versions: Connected Vehicle Systems Alliance COVESA versions up to 2.18.8 Description: The issue is related to a buffer overflow in the Connected Vehicle Systems Alliance COVESA software. This buffer overflow occurs via the component /shared/dlt...