openvswitch: Invalid processing of a malicious OpenFlow role status message

While parsing an OpenFlow role status message Open vSwitch OvS, a call to the abort function for undefined role status reasons in the function 'ofpprintrolestatusmessage' in 'lib/ofp-print.c' could be misused for a remote denial of service attack by a malicious switch...

openvswitch: Invalid processing of a malicious OpenFlow role status message

While parsing an OpenFlow role status message Open vSwitch OvS, a call to the abort function for undefined role status reasons in the function 'ofpprintrolestatusmessage' in 'lib/ofp-print.c' could be misused for a remote denial of service attack by a malicious switch...

September 12, 2017—KB4038799 (Monthly Rollup)

None None...

CVE-2017-13049

The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubikprint...

phpMyAdmin 3.x < 3.3.10.3, 3.4.x < 3.4.3.2 Multiple Vulnerabilities (PMASA-2011-9, PMASA-2011-12) - Linux

phpMyAdmin is prone to multiple vulnerabilities: - a Cross-Site Scripting XSS vulnerability in table Print view - possible superglobal and local variables manipulation in swekey authentication. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

phpMyAdmin 3.x < 3.3.10.3, 3.4.x < 3.4.3.2 Multiple Vulnerabilities (PMASA-2011-9, PMASA-2011-12) - Windows

phpMyAdmin is prone to multiple vulnerabilities: - a Cross-Site Scripting XSS vulnerability in table Print view - possible superglobal and local variables manipulation in swekey authentication. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

PT-2017-12757

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISAKMP parser, specifically in the isakmp rfc3948 print function. This could allow a remote attacker to obtain sensitive information by sending a...

PT-2017-12895

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RSVP parser, specifically in the rsvp obj print function within print-rsvp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...

PT-2017-13020

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 ALT Linux affected versions not specified Description The issue concerns a buffer over-read in the IKEv2 parser, specifically within the print-isakmp.c file, affecting several functions. Recommendations For...

PT-2017-12845

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the NFS parser component of tcpdump, specifically in the xid map enter function within print-nfs.c. This could allow a remote attacker to obtain sensitive...

PT-2017-12842

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the AODV parser, specifically in the aodv extension function within print-aodv.c. This problem can lead to potential data exposure or crashes...

PT-2017-12844

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the Juniper protocols parser, specifically in the juniper parse header function within print-juniper.c. This affects the tcpdump protocol analyzer...

PT-2017-12878

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the OSPFv3 parser, specifically in the ospf6 decode v3 function within print-ospf6.c. This function is used for decoding OSPFv3 packets. Recommendations...

PT-2017-12889

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the bgp attr print function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...

PT-2017-12838

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IS-IS parser, specifically in the isis print function within print-isoclns.c. This problem can lead to potential security issues due to the over-read...

PT-2017-12866

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IPv6 mobility parser, specifically in the mobility opt print function within the print-mobility.c file. Recommendations For versions prior to 4.9.2,...

PT-2017-12868

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISO IS-IS parser, specifically within the print-isoclns.c file, affecting several functions. Recommendations For versions prior to 4.9.2, update to...

PT-2017-12872

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the PIM parser, specifically in the print-pim.c file, affecting several functions. Recommendations For versions prior to 4.9.2, update to version 4.9.2 o...

PT-2017-12873

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the IPv6 fragmentation header parser, specifically within the frag6 print function in print-frag6.c. Recommendations For versions prior to 4.9.2, update to...

PT-2017-12877

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISO IS-IS parser, specifically in the isis print id function within print-isoclns.c. Recommendations For versions prior to 4.9.2, update to version...