tcpdump buffer overflow vulnerability (CNVD-2017-02329)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the ethertypeprint...

tcpdump buffer overflow vulnerability (CNVD-2017-02288)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the bootpprint function ...

tcpdump buffer overflow vulnerability (CNVD-2017-02324)

tcpdump is a set of sniffing tools developed by the Tcpdump team that runs under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in several functions of th...

tcpdump buffer overflow vulnerability (CNVD-2017-02332)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the arpprint function of...

DEBIAN-CVE-2016-5031

The printframeinstbytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

UBUNTU-CVE-2016-5033

The printexprloccontent function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

PT-2017-8663

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by providing crafted frame data to the dump block function in print sections.c. Recommendations...

PT-2017-8655

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service NULL pointer dereference via an object file with empty bss-like sections. This is due to a problem in the print frame inst bytes...

PT-2017-8660

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by providing a crafted file. This is due to a problem in the print exprloc content function...

PT-2017-8658

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted file. This is due to a problem in the print frame inst bytes function. Recommendations For versions...

Design/Logic Flaw

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

CVE-2017-5634

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

CVE-2017-5634: Exposure of Resource to Wrong Sphere

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

PT-2017-16634

Name of the Vulnerable Software and Affected Versions Norwegian Air Shuttle airline kiosk affected versions not specified Description The issue allows physically proximate attackers to bypass the intended UI step and obtain administrative privileges and network access on the underlying Windows OS...

Tcpdump SNMP Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. Tcpdump SNMP parser print-snmp.c:asn1parse suffers from a buffer overflow vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...

Tcpdump Multiple Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. A buffer overflow vulnerability in Tcpdump's multiple parsers print-ether.c:etherprint allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...

Insanity-Framework - Generate Payloads and control Remote Machines

With the dynamics of persuasion that prove effective in a pentest, several painstaking means of making a payload has emerged, Insanity Framework provides speed and effectiveness in a single tool to help you work. Features Bypass most AV and Sandboxes. Remote Control. Payload Generation. Some...

Internet Bug Bounty: CVE-2017-5342 In tcpdump before 4.9.0 a bug in multiple protocol parsers could cause a buffer overflow in print-ether.c:ether_print()

Reported to the project maintainers in 2016. greprint0 and the functions modelled after it passed the value of "length" instead of the value of "caplen", this could make etherprint access beyond the memory allocated for the captured packet. Fixed by...

Printer Exploitation Toolkit: PRET

Printer Exploitation Toolkit PRET is a new tool for printer security testing developed in the scope of a Master’s Thesis at Ruhr University Bochum. PRET connects to a device via network or USB and exploits the features of a given printer language. Currently PostScript , PJL and PCL are supported...

Flaws Found in Popular Printer Models

Vulnerabilities in popular printer models made by HP, Dell and Lexmark expose the devices to attackers who can steal passwords, shut down printers and even steal print jobs. Academic researchers at the University Alliance Ruhr on Monday published a series of advisories and an informational wiki...