21 matches found
CVE-2026-46024
In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in cephhandleauthreply If a message of type CEPHMSGAUTHREPLY contains a zero value for both protocol and result, this is currently not treated as an error. In case of ac-negotiating == tr...
CVE-2026-46024
In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in cephhandleauthreply If a message of type CEPHMSGAUTHREPLY contains a zero value for both protocol and result, this is currently not treated as an error. In case of ac-negotiating == tr...
CVE-2026-46024
CVE-2026-46024 targets the Linux kernel libceph component, where a CEPH_MSG_AUTH_REPLY containing zero values for both protocol and result could lead to a null pointer dereference due to ac->ops being NULL after faulty auth handling. The root cause is that a too-permissive check allowed ac->...
PT-2026-43891
In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in ceph handle auth reply If a message of type CEPH MSG AUTH REPLY contains a zero value for both protocol and result, this is currently not treated as an error. In case of ac-negotiating...
Astra Linux - уязвимость в wireshark
In Wireshark versions up to 3.2.7, the Facebook Zero Protocol also known as FBZERO dissector could enter an infinite loop. This issue was addressed in the epan/dissectors/packet-fbzero.c file by correcting the implementation of offset advancement...
Astra Linux - уязвимость в openvswitch
A flaw was discovered in OpenVSwitch OVS. When processing an IP packet with protocol 0, OVS will install a datapath flow without modifying the IP header. This issue results in the installation of a datapath flow that matches all IP protocols with “nwproto” set to wildcard, but with an incorrect...
CVE-2026-31498
A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol implementation. A remote attacker could exploit this by sending a malformed configuration request with a zero-valued maximum PDU Protocol Data Unit size. This could lead to an infinite loop,...
Unity Linux 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-005363)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005363 advisory. In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by...
CVE-2026-23095
In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...
EUVD-2020-19120
Malware in sbrugna...
SUSE CVE-2020-26575
In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...
OESA-2021-1076 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging...
Wireshark 3.2.x < 3.2.8 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.8 advisory. - In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in...
Wireshark 3.2.x < 3.2.8 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 3.2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.8 advisory. - In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic...
Security fix for the ALT Linux 9 package wireshark version 3.2.8-alt1
3.2.8-alt1 built Nov. 6, 2020 Anton Farygin in task 261029 Nov. 3, 2020 Anton Farygin - 3.2.8 - fixes: CVE-2020-28030 the GQUIC dissector could crash. CVE-2020-26575 the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop...
Security fix for the ALT Linux 10 package wireshark version 3.2.8-alt1
Nov. 3, 2020 Anton Farygin 3.2.8-alt1 - 3.2.8 - fixes: CVE-2020-28030 the GQUIC dissector could crash. CVE-2020-26575 the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop...
Wireshark Infinite Loop Vulnerability (CNVD-2021-11320)
Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. An infinite loop vulnerability...
DEBIAN-CVE-2020-26575
In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...
CVE-2020-26575
In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...
UBUNTU-CVE-2020-26575
In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...