Lucene search
+L

92 matches found

Mageia
Mageia
added 2018/10/19 6:0 p.m.34 views

Updated tcpflow packages fix security vulnerability

pdated tcpflow package fixes security vulnerability: An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the functio...

9.1CVSS3.7AI score0.02753EPSS
SaveExploits1References2
OSV
OSV
added 2018/10/17 4:29 a.m.23 views

CVE-2018-18409

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

5.5CVSS7.2AI score
SaveExploits0References4
OSV
OSV
added 2018/10/17 4:29 a.m.8 views

ALPINE-CVE-2018-18409

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

5.5CVSS7AI score0.01302EPSS
SaveExploits1References1
NVD
NVD
added 2018/10/17 4:29 a.m.13 views

CVE-2018-18409

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

5.5CVSS5.4AI score0.01302EPSS
SaveExploits1References4
Prion
Prion
added 2018/10/17 4:29 a.m.18 views

Stack overflow

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

4.3CVSS5.6AI score0.01302EPSS
SaveExploits1References4Affected Software3
OSV
OSV
added 2018/10/17 4:29 a.m.9 views

DEBIAN-CVE-2018-18409

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

5.5CVSS5.7AI score0.01302EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/10/17 4:0 a.m.31 views

CVE-2018-18409

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

5.6AI score0.01302EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2018/10/17 4:0 a.m.72 views

CVE-2018-18409

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

5.5CVSS5.8AI score0.01302EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2018/10/17 4:0 a.m.91 views

CVE-2018-18409

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

5.5CVSS5.8AI score0.01302EPSS
SaveExploits1
CVE
CVE
added 2018/10/17 4:0 a.m.95 views

CVE-2018-18409

CVE-2018-18409 affects tcpflow 1.5.0 (IPTRee.h setbit) with a stack-based buffer over-read, causing denial of service during address_histogram/get_histogram. Public docs confirm the vulnerability and that tcpflow 1.5.2 fixes it (updates referenced by Mageia/Fedora advisories). No exploitation det...

5.5CVSS5.5AI score0.01302EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2018/10/17 12:0 a.m.7 views

UBUNTU-CVE-2018-18409

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

5.5CVSS6.7AI score0.01302EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2018/10/17 12:0 a.m.29 views

CVE-2018-18409

A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...

5.5CVSS6.7AI score0.01302EPSS
SaveExploits1References3
Fedora
Fedora
added 2018/09/06 3:13 a.m.25 views

[SECURITY] Fedora 28 Update: tcpflow-1.5.0-2.fc28

tcpflow is a program that captures data transmitted as part of TCP connections flows, and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being...

9.1CVSS2.2AI score0.02753EPSS
SaveExploits1
Fedora
Fedora
added 2018/09/06 2:33 a.m.27 views

[SECURITY] Fedora 27 Update: tcpflow-1.5.0-2.fc27

tcpflow is a program that captures data transmitted as part of TCP connections flows, and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being...

9.1CVSS2.2AI score0.02753EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2018/09/06 12:0 a.m.36 views

Fedora 27 : tcpflow (2018-4f0b7d1251)

Update to latest upstream release tcpflow 1.5.0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

9.1CVSS8.1AI score0.02753EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2018/09/06 12:0 a.m.25 views

Fedora Update for tcpflow FEDORA-2018-5ad77cc979

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.3AI score0.02753EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2018/09/06 12:0 a.m.29 views

Fedora Update for tcpflow FEDORA-2018-4f0b7d1251

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.3AI score0.02753EPSS
SaveExploits1References2
CNVD
CNVD
added 2018/08/06 12:0 a.m.16 views

tcpflow integer overflow vulnerability

TCPFLOW is a network monitoring tool that records TCP sessions. An integer overflow vulnerability exists in the wifipcap/wifipcap.cpp file in TCPFLOW 1.5.0-alpha and prior versions. An attacker can exploit this vulnerability to cause an out-of-bounds read and possibly access sensitive memory or...

9.1CVSS9AI score0.02753EPSS
SaveExploits1References1
OSV
OSV
added 2018/08/05 3:29 a.m.8 views

DEBIAN-CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS8.9AI score0.02753EPSS
SaveExploits1References1
NVD
NVD
added 2018/08/05 3:29 a.m.15 views

CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS9.2AI score0.02753EPSS
SaveExploits1References4
Rows per page
Query Builder