Lucene search
+L

25713 matches found

OSV
OSV
added 2024/08/30 11:53 p.m.27 views

CVE-2024-8006 NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcapfindalldevsex. One of the function arguments can be a filesystem path, which normally means a directory with...

4.4CVSS7.2AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2024/08/30 11:53 p.m.86 views

CVE-2024-8006

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcapfindalldevsex. One of the function arguments can be a filesystem path, which normally means a directory with...

4.4CVSS7AI score0.00242EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/30 11:53 p.m.64 views

CVE-2024-8006 NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcapfindalldevsex. One of the function arguments can be a filesystem path, which normally means a directory with...

4.4CVSS0.00242EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/08/30 11:53 p.m.24 views

CVE-2024-8006

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcapfindalldevsex. One of the function arguments can be a filesystem path, which normally means a directory with...

4.4CVSS6.4AI score0.00242EPSS
SaveExploits0
CVE
CVE
added 2024/08/30 11:44 p.m.158 views

CVE-2023-7256

CVE-2023-7256 – libpcap is affected by a double-free in the remote packet capture setup path. The root cause is that sock_initaddress() calls getaddrinfo() and may call freeaddrinfo(), but does not clearly communicate to the caller whether freeaddrinfo() still needs to be called after return. Thi...

4.4CVSS4.7AI score0.00242EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/30 11:44 p.m.29 views

CVE-2023-7256 Double-free in libpcap before 1.10.5 with remote packet capture support.

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

4.4CVSS6.9AI score0.00242EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2024/08/30 11:44 p.m.98 views

CVE-2023-7256

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

9.8CVSS6.7AI score0.01765EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/30 11:44 p.m.31 views

CVE-2023-7256 Double-free in libpcap before 1.10.5 with remote packet capture support.

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

4.4CVSS6.7AI score
SaveExploits0References5
OSV
OSV
added 2024/08/30 11:07 a.m.24 views

OESA-2024-2076 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb-sk in ipvlanprocessv4,6outbound Raw packet from PFPACKET socket ontop of an IPv6-backed ipvlan device will hit WARNONONCE in skmcloop throug...

8.2CVSS6.8AI score0.00922EPSS
SaveExploits1References135
SUSE CVE
SUSE CVE
added 2024/08/30 10:15 a.m.5 views

SUSE CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS7.1AI score0.00317EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2024/08/30 12:00 a.m.18 views

The vulnerability of IBM QRadar Network Packet Capture in capturing network traffic lies in the lack of data encryption measures, which allows attackers to disclose protected information.

The vulnerability of IBM QRadar Network Packet Capture relates to the lack of measures for data encryption. Exploiting this vulnerability could allow a malicious actor to disclose protected information by executing a “man-in-the-middle” attack...

5.9CVSS5.4AI score0.00303EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/30 12:00 a.m.8 views

PT-2024-6379 · Libpcap +3 · Libpcap +3

Name of the Vulnerable Software and Affected Versions: libpcap versions affected versions not specified Description: The issue is related to the function freeaddrinfo in the libpcap library, where it is called for the same allocated memory block, potentially leading to a denial of service. During...

4.4CVSS8.1AI score0.00242EPSS
SaveExploits0References52
CNNVD
CNNVD
added 2024/08/30 12:00 a.m.9 views

libpcap 代码问题漏洞

libpcap is a portable C/C ++ library for network traffic capture from the Tcpdump team. A code issue vulnerability exists in libpcap, which stems from improper handling of filesystem paths in the pcapfindalldevsex function. When the specified path cannot be used as a directory, the function fails...

4.4CVSS6.3AI score0.00242EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2024/08/30 12:00 a.m.14 views

Cisco NX-OS Software DHCPv6 Relay Agent DoS (cisco-sa-nxos-dhcp6-relay-dos-znEAA6xn)

A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of specific fields in a DHCPv6 RELAY-REPLY message. An attacker could...

8.6CVSS5.7AI score0.00784EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2024/08/29 3:55 a.m.26 views

CVE-2024-8250

A flaw was found in wireshark. Affected versions of wireshark allow denial of service via packet injection or crafted capture file. It may be possible to cause Wireshark to crash by injecting a malformed packet onto the wire or convincing someone to read a malformed packet trace file. Mitigation...

5.5CVSS6.1AI score0.00317EPSS
SaveExploits1References5
NVD
NVD
added 2024/08/29 12:15 a.m.23 views

CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS0.00317EPSS
SaveExploits1References3
OSV
OSV
added 2024/08/29 12:15 a.m.5 views

DEBIAN-CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/29 12:15 a.m.12 views

AZL-48339 CVE-2024-8250 affecting package wireshark for versions less than 4.4.7-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS7.1AI score0.00317EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/29 12:15 a.m.10 views

AZL-48338 CVE-2024-8250 affecting package wireshark 4.0.8-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS7.1AI score0.00317EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/08/28 11:30 p.m.22 views

CVE-2024-8250 Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.6AI score0.00317EPSS
SaveExploits1References2
Rows per page
Query Builder