Lucene search
+L

22 matches found

Mageia
Mageia
•added 2026/05/07 5:06 a.m.•103 views

Updated tcpflow packages fix security vulnerability

tcpflow has TIM Element OOB Write in wifipcap. CVE-2026-25061...

7.5CVSS6AI score0.00583EPSS
SaveExploits1References2
osv-mgasa
osv-mgasa
•added 2026/05/07 5:06 a.m.•25 views

MGASA-2026-0113 Updated tcpflow packages fix security vulnerability

tcpflow has TIM Element OOB Write in wifipcap. CVE-2026-25061...

7.5CVSS5.8AI score0.00583EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2026/01/29 10:15 p.m.•14 views

CVE-2026-25061

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

7.5CVSS5.7AI score0.00583EPSS
SaveExploits1References2
osv-cve
osv-cve
•added 2026/01/29 9:42 p.m.•16 views

CVE-2026-25061 tcpflow has TIM Element OOB Write in wifipcap

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

6.9CVSS6.3AI score
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/01/29 9:42 p.m.•23 views

CVE-2026-25061

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

7.5CVSS6AI score0.00583EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/01/29 9:42 p.m.•4 views

CVE-2026-25061 tcpflow has TIM Element OOB Write in wifipcap

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

6.9CVSS6AI score0.00583EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/01/29 9:42 p.m.•24 views

EUVD-2026-4944

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

6.9CVSS6AI score0.00583EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/29 9:42 p.m.•61 views

CVE-2026-25061

tcpflow is affected by a TIM element handling bug in wifipcap: a crafted 802.11 frame with a large TIM length can cause a 1‑byte out‑of‑bounds write at tim.bitmap[251], due to a faulty length check. The overflow is on a stack‑allocated structure in handle_beacon; impact is DoS with potential (but...

7.5CVSS6AI score0.00583EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2026/01/29 9:42 p.m.•22 views

CVE-2026-25061

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

7.5CVSS6AI score0.00583EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/29 12:00 a.m.•1 views

CVE-2026-25061: Out-of-bounds Write

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

7.5CVSS6AI score0.00583EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/01/29 12:00 a.m.•23 views

TCPFLOW buffer error vulnerability

TCPFLOW is a TCP/IP packet demuxer developed by Simson L. Garfinkel. Versions of TCPFLOW 1.61 and earlier contained a buffer error vulnerability. This vulnerability stemmed from the use of wifipcap to perform length checks on error fields when processing TIM elements, which could lead to...

7.5CVSS6.1AI score0.00583EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/02/15 4:25 a.m.•10 views

SUSE CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS9.1AI score0.02753EPSS
SaveExploits1References3
Mageia
Mageia
•added 2018/10/19 6:00 p.m.•39 views

Updated tcpflow packages fix security vulnerability

pdated tcpflow package fixes security vulnerability: An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the functio...

9.1CVSS3.7AI score0.02753EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/08/06 12:00 a.m.•25 views

tcpflow integer overflow vulnerability

TCPFLOW is a network monitoring tool that records TCP sessions. An integer overflow vulnerability exists in the wifipcap/wifipcap.cpp file in TCPFLOW 1.5.0-alpha and prior versions. An attacker can exploit this vulnerability to cause an out-of-bounds read and possibly access sensitive memory or...

9.1CVSS9AI score0.02753EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2018/08/05 3:29 a.m.•30 views

CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS6.9AI score0.02753EPSS
SaveExploits1References4
osv-debian
osv-debian
•added 2018/08/05 3:29 a.m.•11 views

DEBIAN-CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS8.9AI score0.02753EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/08/05 3:00 a.m.•42 views

CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1AI score0.02753EPSS
SaveExploits1References4
Mend
Mend
•added 2018/08/05 3:00 a.m.•5 views

CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS0.02753EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2018/08/05 3:00 a.m.•65 views

CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS9.2AI score0.02753EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/05 12:00 a.m.•6 views

CVE-2018-14938: Out-of-bounds Read

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS8AI score0.02753EPSS
SaveExploits1References3
Rows per page
Query Builder