53 matches found
CVE-2012-6056
Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...
UBUNTU-CVE-2012-6056
Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...
CVE-2012-6056
Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...
RedHat Security Advisory RHSA-2009:1055
The remote host is missing updates announced in advisory RHSA-2009:1055. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: a buffer overflow was found in the Linux kernel Partial Reliable Stream Control Transmissi...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix one security issue and a bug are now available for Red Hat Enterprise Linux 5.2 Extended Update Support. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of...
kernel: sctp: memory overflow when FWD-TSN chunk is received with bad stream ID
Buffer overflow in net/sctp/smstatefuns.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN aka FORWARD-TSN chunk with a large stream ID...
kernel: sctp: memory overflow when FWD-TSN chunk is received with bad stream ID
Buffer overflow in net/sctp/smstatefuns.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN aka FORWARD-TSN chunk with a large stream ID...
Buffer overflow
Buffer overflow in net/sctp/smstatefuns.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN aka FORWARD-TSN chunk with a large stream ID...
CVE-2009-0065
Buffer overflow in net/sctp/smstatefuns.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN aka FORWARD-TSN chunk with a large stream ID...
Linux Kernel FWD-TSN块远程溢出漏洞
BUGTRAQ ID: 33113 Linux Kernel是开放源码操作系统Linux所使用的内核。 如果Linux接收到了设置有畸形流ID的FWD-TSN块的话，sctp就不会执行有效性检查，这可能导致在覆盖流ID的TSN时出现溢出。 可通过以下代码路径触发这个溢出： sctpdosm - call sctpsfeatfwdtsn - sctpsideeffects - sctpcmdinterpreter - cmd - verb（如SCTPCMDPROCESSFWDTSN） linux-2.6:net/sctp/smsideeffect.c： 1079 / This is the...
CVE-2002-0584
WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the tsappprocess.asp script, which is easily guessable because it is incremented by 1 for each new timesheet...
CVE-2002-0584
The CVE-2002-0584 entry concerns WorkforceROI Xpede 4.1. The vulnerability allows remote attackers to read user timesheets by tampering with the TSN ID parameter in the ts_app_process.asp script. The TSN ID is easily guessable because it is incremented by 1 for each new timesheet, enabling an att...
