9303 matches found
DEBIAN-CVE-2017-9351
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully...
ALPINE-CVE-2017-9351
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully...
UBUNTU-CVE-2017-9348
In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value...
DEBIAN-CVE-2017-9348
In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value...
Important product security update: Virtuozzo Automator 6.1 Update 2 Hotfix 5 (VA MN: 6.0-3266, VA Agent: 6.0-3266)
This hotfix for Virtuozzo Automator 6.1 provides a security fix. Vulnerability id: PVA-37007 Possible buffer overread when using File Manager...
Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 1 (VA MN: 7.0.2-344, VA Agent: 7.0.2-152)
This hotfix for Virtuozzo Automator 7.0.2 provides a security fix as well as stability and usability bug fixes. Vulnerability id: PVA-37008 Possible buffer overread when using File Manager...
AIX 7.1 TL 3 : tcpdump (IV94727)
Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...
AIX 6.1 TL 9 : tcpdump (IV94728)
Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...
AIX 7.2 TL 0 : tcpdump (IV94724)
Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...
AIX 7.2 TL 1 : tcpdump (IV94723)
Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...
AIX 5.3 TL 12 : tcpdump (IV94729)
Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...
AIX 7.1 TL 4 : tcpdump (IV94726)
Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...
DEBIAN-CVE-2017-9264
In lib/conntrack.c in the firewall implementation in Open vSwitch OvS 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extractl3ipv6, extractl4tcp, and extractl4udp that can be triggered remotely...
DEBIAN-CVE-2017-9265
In Open vSwitch OvS v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in lib/ofp-util.c in the function ofputilpullofp15groupmod...
DEBIAN-CVE-2016-10375
Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...
UBUNTU-CVE-2016-10375
Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...
Open vSwitch Integer Overflow Vulnerability
Open vSwitch OVS is a multi-layer virtual switch product based on open source technology following the Apache 2.0 license, which supports large-scale network automation through programmatic extensions, standard management interfaces and protocols, and more. An integer overflow vulnerability exist...
openSUSE Security Update : libxslt (openSUSE-2017-609)
This update for libxslt fixes the following security issues : - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page bsc1035905. ...