DEBIAN-CVE-2022-27666

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat...

Heap overflow

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat...

PT-2022-1992 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.15 Linux kernel versions prior to 5.17 Description: A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a...

IPSec ESP kernel panics

The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service crash via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV...

Linux kernel multiple security vulnerabilities

IPSec ESP pacjet parsing DoS, multiple local DoS conditions, kernel memory data leak, privilege escalation...

Wireshark多个协议处理单元安全漏洞

Wireshark是一款非常流行的网络协议分析工具,以前名为Ethereal，。 Wireshark中存在多个安全漏洞，具体如下： 1 SCSI协议处理单元中的漏洞可能导致应用程序崩溃； 2 如果编译了ESP解密支持的话，IPSec ESP偏好解析器中就会存在单字节缓冲区溢出漏洞； 3 由于Glib中的一个bug，DHCP协议处理单元中的漏洞可能导致Wireshark崩溃。这个漏洞仅影响Windows版本； 4 Q.2391协议处理单元中的漏洞可能导致耗尽内存。 受影响系统： Wireshark Wireshark 0.7.9 - 0.99.2 不受影响系统： Wireshark...

CentOS 3 / 4 : wireshark (CESA-2006:0658)

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Bugs were found in...

RHEL 2.1 / 3 / 4 : wireshark (RHSA-2006:0658)

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Bugs were found in...

GLSA-200608-26 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200608-26 Wireshark: Multiple vulnerabilities The following vulnerabilities have been discovered in Wireshark. Firstly, if the IPsec ESP parser is used it is susceptible to off-by-one errors, this parser is disabled by default;...

Multiple problems in Wireshark (Ethereal®) versions 0.7.9 to 0.99.2

Summary Name: Multiple problems in Wireshark Ethereal® versions 0.7.9 to 0.99.2 Docid: wnpa-sec-2006-02 Date: August 23, 2006 Versions affected: 0.7.9 up to and including 0.99.2 Details Description Wireshark 0.99.3 fixes the following vulnerabilities: The SCSI dissector could crash. Versions...