Lucene search
+L

35 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:3 a.m.5 views

SUSE CVE-2016-4082

epan/dissectors/packet-gsmcbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service out-of-bounds access and application crash via a crafted packet...

5.9CVSS5.9AI score0.02401EPSS
Exploits0References3
Veracode
Veracode
added 2021/12/15 4:13 a.m.11 views

Information Disclosure

opencast-common is vulnerable to Information Disclosure. The attack is possible because the library does not restrict the file access and authenticate against external services listed in a media package, leading to disclose the global system user's credentials to the outside cluster...

7.5CVSS6.5AI score0.00829EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2021/12/14 9:43 p.m.50 views

GHSA-HCXX-MP6G-6GR9 Opencast publishes global system account credentials

The issue was mostly mitigated before, drastically reducing the risk. See references below for more information. Impact Opencast before version 10.6 will try to authenticate against any external services listed in a media package when it is trying to access the files, sending the global system...

7.5CVSS5.9AI score0.00829EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2021/12/14 9:43 p.m.36 views

Opencast publishes global system account credentials

The issue was mostly mitigated before, drastically reducing the risk. See references below for more information. Impact Opencast before version 10.6 will try to authenticate against any external services listed in a media package when it is trying to access the files, sending the global system...

7.5CVSS1.1AI score0.00829EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/07/05 12:0 a.m.8 views

The vulnerability of the Qualcomm GERAN component of the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the GERAN component GSM EDGE Radio Access Network of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibili...

10CVSS5.7AI score0.01354EPSS
Exploits0References3
OSV
OSV
added 2016/06/13 1:59 a.m.5 views

UBUNTU-CVE-2016-2484

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature ...

7.8CVSS7.5AI score0.00419EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2015/11/19 6:3 a.m.7 views

wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25)

epan/dissectors/packet-gsmrlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

4.3CVSS5.9AI score0.02946EPSS
Exploits0References5
OSV
OSV
added 2015/07/22 1:59 a.m.4 views

DEBIAN-CVE-2015-4652

epan/dissectors/packet-gsmadtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly validate digit characters, which allows remote attackers to cause a denial of service application crash via a crafted packet, related to the deemergnumlist and debcdnum functions...

4.3CVSS5.2AI score0.02317EPSS
Exploits0References1
CNVD
CNVD
added 2015/07/08 12:0 a.m.5 views

Wireshark GSM DTAP Dissector 'packet-gsm_a_dtap.c' Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A remote denial of service vulnerability exists in Wireshark. An attacker could exploit...

4.3CVSS6.8AI score0.02317EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/05/08 12:0 a.m.34 views

Amazon Linux AMI : docker (ALAS-2015-522)

The file-descriptor passed by libcontainer to the pid-1 process of a container has been found to be opened prior to performing the chroot, allowing insecure open and symlink traversal. This allows malicious container images to trigger a local privilege escalation. CVE-2015-3627 Libcontainer versi...

7.8CVSS6.3AI score0.00609EPSS
Exploits0References5
ThreatPost
ThreatPost
added 2015/01/22 11:55 a.m.16 views

Regin Cyberespionage Malware Platform Modules Disclosed

The Regin malware platform used to steal secrets from government agencies, banks and GSM network operators caught the attention of security experts who called it one of the most advanced attack platforms that has been studied, surpassing Flame, Duqu, even Stuxnet. Researchers at Kaspersky Lab sai...

0.9AI score
Exploits0References6
ThreatPost
ThreatPost
added 2014/11/24 10:9 a.m.15 views

Regin Cyberespionage Malware Platform Targets GSM Networks

Researchers have uncovered a complex espionage platform reminiscent of Duqu that has been used since at least 2008 not only to spy on and extract email and documents from government agencies, research institutions and banks, but also one that targets GSM network operators in order to launch...

0.2AI score
Exploits0References5
ThreatPost
ThreatPost
added 2013/08/26 3:43 p.m.21 views

Phone Hack Could Block Messages, Calls on GSM Networks

By tweaking the firmware on certain kinds of phones, a hacker could make it so other phones in the area are unable to receive incoming calls or SMS messages, according to research presented at the USENIX Security Symposium earlier this month. The hack involves modifying the baseband processor on...

7.3AI score
Exploits0References3
OSV
OSV
added 2008/07/10 11:41 p.m.4 views

DEBIAN-CVE-2008-3137

The GSM SMS dissector in Wireshark formerly Ethereal 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service application crash via unknown vectors...

4.3CVSS6.6AI score0.01812EPSS
Exploits1References1
OSV
OSV
added 2006/07/21 2:3 p.m.1 views

DEBIAN-CVE-2006-3627

Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark aka Ethereal 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service crash via unspecified vectors...

5CVSS6.8AI score0.03266EPSS
Exploits0References1
Rows per page
Query Builder