Wireshark epan/wmem/wmem_allocator_block.c Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. Multiple 'wmemblocksplitfreechunk' functions in the epan/wmem/wmemallocatorblock.c file of the wmem block allocator in Wireshark's Memory Manager The mealloc operation restores the...

UBUNTU-CVE-2015-6242

The wmemblocksplitfreechunk function in epan/wmem/wmemallocatorblock.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote...

CVE-2015-6524

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...

PT-2015-7131

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.6 Description The issue is related to the wmem block allocator in the memory manager. It allows remote attackers to cause a denial of service, resulting in an incorrect free operation and application cras...

Cisco TelePresence SX20 HTTP Answer Splitting Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco. A security vulnerability exists in Cisco TelePresence that could be exploited by remote attackers to submit a specially crafted URL to cause the target server to return a split response, spoofing the contents of the...

VPN Tunnel Detection via HTTP CONNECT

Binary data 3177.prm...

tar-split

tar-split !Build Statushttps://github.com/vbatts/tar-split...

PT-2014-7101

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.3.0 Description The issue is related to an integer overflow in the string chunk split function, which can be triggered by remote attackers sending crafted arguments to the chunk split function. This can cause a denial ...

wireshark: RTP dissector crash (wnpa-sec-2014-12)

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...

[SECURITY] Fedora 20 Update: kdemultimedia-4.14.1-1.fc20

Kdemultimedia metapackage, to ease migration to split applications...

[SECURITY] Fedora 20 Update: kdegraphics-4.14.1-1.fc20

Kdegraphics metapackage, to ease migration to split applications...

[SECURITY] Fedora 20 Update: kdebindings-4.14.1-1.fc20

Kdebindings metapackage, to ease migration to split applications...

[SECURITY] Fedora 20 Update: kdeedu-4.14.1-1.fc20

kdeedu metapackage, to ease migration to split applications...

CVE-2014-6421

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...

UBUNTU-CVE-2014-6421

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...

CVE-2014-6421

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...

CVE-2014-6421

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...

Fedora 19 : perl-Plack-1.0031-1.fc19 (2014-9544)

---------------------------------------------------------------------- ---------- ChangeLog : - Fri Aug 8 2014 Ralf Corsepius - 1.0031-1 - Upstream update. - Thu Jan 16 2014 Ralf Corsepius - 1.0030-3 - Move misplaced %exclude-line from base-package to -Test. - Wed Jan 15 2014 Ralf Corsepius -...

PT-2013-2048

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.2 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This occurs when a subtitle dialog without text is processed by the ff ass split...

Apple Turns on BEAST Attack Mitigation by Default in Safari

Apple enabled a feature in its recent OS X Mavericks update that neutered the BEAST cryptographic attacks. BEAST is a two-year-old attack tool that exploits a vulnerability in TLS 1.0 and SSL 3.0 and could lead to an attacker stealing HTTPS cookies or hijacking browser sessions. Apple’s Safari...