CVE-2021-27862: Improper Handling of Length Parameter Inconsistency

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion and optionally VLAN0 headers...

CVE-2021-27854: Authentication Bypass by Spoofing

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse...

Security Advisory 0080

Security Advisory 0080 . CSAF PDF Date: September 28th 2023 Revision | Date | Changes ---|---|--- 1.5 | September 28th 2023 | Update to include 4.29 to EOS Releases that resolve the CVE's 1.4 | January 11th 2023 | Update the fixed release info of NetVisor OS Software 1.3 | October 24th 2022 |...

Security Bulletin: Vulnerability in OSPFv2 Routing Protocol Used in IBM System Networking Ethernet Switches (CVE-2013-5385)

Abstract Many IBM System Networking Ethernet switches use the OSPFv2 routing protocol, which has an ambiguity that can be exploited to allow network traffic to be black-holed and/or redirected. Remediation for this vulnerability consists of updating the IBM Networking Operating System NOS running...

Security Bulletin: Vulnerability in Transport Layer Security Protocol Used in IBM System Networking Ethernet Switches (CVE-2011-3389)

Abstract Earlier versions of the Transport Layer Security TLS protocol are affected by a publicly disclosed vulnerability that could allow information disclosure if an attacker is carrying out a man-in-the-middle attack. Customers can avoid the vulnerability by following workarounds recommended b...

Linux kernel USB Gigabit Ethernet driver ASIX AX88179_178A Information Disclosure

The vulnerability of the Linux kernel driver for USB 2.0/3.0 Gigabit Ethernet devices based on the ASIX AX88179178A chip is related to operations involving reading and writing beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to gain access to potentially...

SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2022:3309-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3309-1 advisory. Updated to Wireshark 3.6.8: - CVE-2022-3190: Fixed F5 Ethernet Trailer dissector infinite loop...

Denial Of Service (DOS)

wireshark is vulnerable to denial of service. It is due to a Infinite loop in the F5 Ethernet Trailer protocol dissector which allows an attacker to cause a crash, and perform a denial of service attack...

SUSE-SU-2022:3309-1 Security update for wireshark

This update for wireshark fixes the following issues: Updated to Wireshark 3.6.8: - CVE-2022-3190: Fixed F5 Ethernet Trailer dissector infinite loop bsc1203388. - CVE-2021-4186: Fixed Gryphon dissector crash bsc1194165...

PT-2022-25420

Name of the Vulnerable Software and Affected Versions NETGEAR routers and Orbi WiFi Systems versions prior to 1.1.0.112 NETGEAR R6260 versions prior to 1.1.0.88 NETGEAR R7000 versions prior to 1.0.11.134 NETGEAR R8900 versions prior to 1.0.5.42 NETGEAR R9000 versions prior to 1.0.5.42 NETGEAR XR3...

Mageia: Security Advisory (MGASA-2022-0336)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-34046 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: A missing clk disable unprepare call in intel eth pci remove may potentially lead to a security issue. The actual impact and attack plausibility have not yet been proven. Recommendations:...

Wireshark Denial of Service Vulnerability (CNVD-2023-62295)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial-of-service vulnerability that stems from an infinite loop in its...

MGASA-2022-0336 Updated wireshark packages fix security vulnerability

F5 Ethernet Trailer dissector infinite loop wnpa-sec-2022-06...

Updated wireshark packages fix security vulnerability

F5 Ethernet Trailer dissector infinite loop wnpa-sec-2022-06...

USN-5616-1: Linux kernel (Intel IoTG) vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 Moshe Kol, Amit Klein and Yossi Gilad discovered that the I...

USN-5616-1 linux-intel-iotg vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 Moshe Kol, Amit Klein and Yossi Gilad discovered that the I...

PT-2022-37577 · F5 · F5

Name of the Vulnerable Software and Affected Versions: F5 affected versions not specified Description: The issue is related to an infinite loop in the F5 Ethernet Trailer dissector. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file

...

PT-2022-5097 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE...