13315 matches found
MGASA-2020-0430 Updated tcpdump package fixes a security vulnerability
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. CVE-2020-8037...
Updated tcpdump package fixes a security vulnerability
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. CVE-2020-8037...
SUSE-SU-2020:3376-1 Security update for wireshark
This update for wireshark fixes the following issues: - wireshark was updated to 3.2.8: - CVE-2020-26575: Fixed an issue where FBZERO dissector was entering in infinite loop bsc1177406 - CVE-2020-28030: Fixed an issue where GQUIC dissector was crashing bsc1178291 Infinite memory allocation while...
RHEL 8 : exiv2 (RHSA-2020:1577)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1577 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The...
CVE-2020-27486
Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the string length...
Buffer overflow
Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the string length...
Denial Of Service (DoS)
cbor-sync is vulnerable to Denial Of Service. A Denial Of Service condition occurs when the server drains all the free memory during allocation of an unbounded length buffer...
Debian DLA-2444-1 : tcpdump security update
The ppp de-capsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. The buffer should be big enough to hold the captured data, but it doesnt need to be big enough to hold the entire on-the-network packet, if we havent captured all of it. For Debian 9 stretch, this proble...
Oracle Linux 8 : cryptsetup (ELSA-2020-4542)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4542 advisory. 2.3.3-2 - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library. - Resolves: 1872294 2.3.3-1 - Update to cryptsetup 2.3.3 - Resolves:...
ppp decapsulator can be convinced to allocate a large amount of memory
...
[SECURITY] [DLA 2444-1] tcpdump security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2444-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 10, 2020 https://wiki.debian.org/LTS -...
DEBIAN-CVE-2020-8037
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...
ALPINE-CVE-2020-8037
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...
CVE-2020-8037
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...
CVE-2020-8037
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...
CVE-2020-8037
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...
UBUNTU-CVE-2020-8037
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...
CVE-2020-8037 ppp decapsulator can be convinced to allocate a large amount of memory
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...
CVE-2020-8037
CVE-2020-8037 affects tcpdump’s ppp decapsulator and can cause unbounded memory allocation, leading to DoS. Public documents corroborate that tcpdump 4.9.3 and later patch levels address this issue by upgrading the tcpdump package (e.g., 4.9.3-3 in some distributions; Ubuntu/Debian updates list 4...
