The vulnerability of the parse_report_descriptor() function in the Wireshark USB HID traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the parsereportdescriptor function in the Wireshark USB HID traffic analyzer relates to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the spdy_assemble_data_frames() function (epan/dissectors/packet-spdy.c) in the Wireshark network traffic analyzer allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the spdyassembledataframes function epan/dissectors/packet-spdy.c in the Wireshark network traffic analyzer is related to the execution of operations outside the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...

The vulnerability of the dissect_zbee_zcl_touchlink() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissectzbeezcltouchlink function in the Wireshark network traffic analyzer relates to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to cause a service failure...

ROS-20261001-73-0028

The vulnerability in glib2 is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the TTL analyzer parser in Wireshark allows a hacker to cause a service failure.

The vulnerability of the TTL analyzer in Wireshark for computer network traffic analysis is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

Rocky Linux 9 [CIQ] Security Update: mod_http2 / mod_http2-debuginfo / mod_http2-debugsource (crlsa-2025_14983)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202514983 advisory. httpd: modproxyhttp2: untrusted input from a client causes an assertion to fail in the Apache modproxyhttp2 module CVE-2025-49630 Tenable has extracted the precedi...

The vulnerability of the Catapult DCT2000 file parser, a network traffic analyzer from Wireshark, allows a hacker to cause a service failure.

The vulnerability of the Catapult DCT2000 file parser, a packet analyzer for computer networks developed by Wireshark, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20261001-73-0035

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0061

The vulnerability in aardvark-dns is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20261001-73-0011

The vulnerability in gstreamer1-plugins-base is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2024_2551)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242551 advisory. bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868 bind: KeyTrap - Extreme CPU consumption in DNSSEC validator...

Rocky Linux 8 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_1781)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241781 advisory. bind9: Parsing large DNS messages may cause excessive CPU load CVE-2023-4408 bind9: Querying RFC 1918 reverse zones may cause an assertion failure when...

ROS-20261001-73-0031

The vulnerability in Xen is related to the lack of checking for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0016

The vulnerability in perl-YAML-Syck is related to reading beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0017

The vulnerability in perl-YAML-Syck is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261001-73-0040

The vulnerability in expat is related to the return of incorrect status codes. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0009

The vulnerability of the storeAtts function in the Expat library is related to its algorithmic complexity. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20261001-73-0029

The vulnerability in the p11-kit is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the shouldBypassProxy() function in the axios library’s lib/helpers/shouldBypassProxy.js file, which allows a hacker to trigger a service failure.

The vulnerability of the shouldBypassProxy function in the axios library’s lib/helpers/shouldBypassProxy.js file is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the dissect_tiff_ifd() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissecttiffifd function in the Wireshark network traffic analyzer is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability can allow attackers to cause service failures...