Lucene search
+L

2535 matches found

OSV
OSV
added 2020/03/02 3:14 p.m.8 views

OPENSUSE-SU-2020:0286-1 Security update for ppp

This update for ppp fixes the following security issue: - CVE-2020-8597: Fixed a buffer overflow in the eaprequest and eapresponse functions bsc1162610. This update was imported from the SUSE:SLE-15:Update update project...

9.8CVSS9.9AI score0.19582EPSS
SaveExploits3References3
OSV
OSV
added 2020/02/29 1:42 p.m.4 views

MGASA-2020-0111 Updated wireshark packages fix security vulnerabilities

Updated wireshark packages fix security vulnerabilities: LTE RRC dissector memory leak. WiMax DLMAP dissector crash. EAP dissector crash...

7.3AI score
SaveExploits0References7
Mageia
Mageia
added 2020/02/29 1:42 p.m.21 views

Updated wireshark packages fix security vulnerabilities

Updated wireshark packages fix security vulnerabilities: LTE RRC dissector memory leak. WiMax DLMAP dissector crash. EAP dissector crash...

2AI score
SaveExploits0References6
NVD
NVD
added 2020/02/28 3:15 p.m.21 views

CVE-2019-10064

hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...

7.5CVSS7.5AI score0.03842EPSS
SaveExploits1References7
OSV
OSV
added 2020/02/28 3:15 p.m.8 views

CVE-2019-10064

hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...

7.5CVSS7.4AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2020/02/28 3:15 p.m.24 views

CVE-2019-10064

hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...

7.5CVSS7AI score0.03842EPSS
SaveExploits1References3
Prion
Prion
added 2020/02/28 3:15 p.m.21 views

Design/Logic Flaw

hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...

5CVSS7.5AI score0.03842EPSS
SaveExploits1References7Affected Software2
OSV
OSV
added 2020/02/28 3:15 p.m.3 views

UBUNTU-CVE-2019-10064

hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...

7.5CVSS7AI score0.03842EPSS
SaveExploits1References4
CVE
CVE
added 2020/02/28 2:7 p.m.153 views

CVE-2019-10064

CVE-2019-10064 affects hostapd prior to 2.6 in EAP mode, where rand() and random() are invoked without a preceding srand()/srandom(), leading to deterministic values. This behavior is described as an inappropriate use of randomness and is fixed in conjunction with CVE-2016-10743. Public reference...

7.5CVSS7.4AI score0.03842EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2020/02/28 2:7 p.m.40 views

CVE-2019-10064

hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...

7.5AI score0.03842EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2020/02/28 2:7 p.m.61 views

CVE-2019-10064

hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...

7.5CVSS2.4AI score0.03842EPSS
SaveExploits1
CNVD
CNVD
added 2020/02/28 12:0 a.m.7 views

Wireshark EAP Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.EAP is one of the EAP Extended Authentication Protocol parsers. A security vulnerability...

7.5CVSS7.5AI score0.03109EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2020/02/28 12:0 a.m.40 views

Wireshark 2.6.x < 2.6.15 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.6.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.15 advisory. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. Thi...

7.5CVSS7.1AI score0.03109EPSS
SaveExploits3References10
Tenable Nessus
Tenable Nessus
added 2020/02/28 12:0 a.m.17 views

Wireshark 2.6.x < 2.6.15 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.6.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.15 advisory. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak...

7.5CVSS7.2AI score0.03109EPSS
SaveExploits3References10
Tenable Nessus
Tenable Nessus
added 2020/02/28 12:0 a.m.26 views

Wireshark 3.2.x < 3.2.2 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.2 advisory. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This...

7.5CVSS7.1AI score0.03109EPSS
SaveExploits3References13
Tenable Nessus
Tenable Nessus
added 2020/02/28 12:0 a.m.41 views

Wireshark 3.2.x < 3.2.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.2 advisory. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak...

7.5CVSS7.2AI score0.03109EPSS
SaveExploits3References13
Tenable Nessus
Tenable Nessus
added 2020/02/28 12:0 a.m.32 views

Wireshark 3.0.x < 3.0.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.0.9 advisory. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This...

7.5CVSS7.1AI score0.03109EPSS
SaveExploits3References10
Tenable Nessus
Tenable Nessus
added 2020/02/28 12:0 a.m.44 views

Wireshark 3.0.x < 3.0.9 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.0.9 advisory. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak...

7.5CVSS7.2AI score0.03109EPSS
SaveExploits3References10
NVD
NVD
added 2020/02/27 11:15 p.m.12 views

CVE-2020-9428

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing...

7.5CVSS7.3AI score0.03109EPSS
SaveExploits1References9
OSV
OSV
added 2020/02/27 11:15 p.m.20 views

CVE-2020-9428

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing...

7.5CVSS6.5AI score
SaveExploits0References9
Rows per page
Query Builder