Lucene search
K

434 matches found

OSV
OSV
added 2018/11/29 4:29 a.m.1 views

DEBIAN-CVE-2018-19628

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error...

7.5CVSS8.7AI score0.02194EPSS
Exploits1References1
Prion
Prion
added 2018/11/29 4:29 a.m.18 views

Design/Logic Flaw

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error...

5CVSS7.2AI score0.02194EPSS
Exploits1References7Affected Software2
UbuntuCve
UbuntuCve
added 2018/11/29 4:29 a.m.27 views

CVE-2018-19628

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error...

7.5CVSS7.1AI score0.02194EPSS
Exploits1References4
NVD
NVD
added 2018/11/29 4:29 a.m.13 views

CVE-2018-19628

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error...

7.5CVSS7.3AI score0.02194EPSS
Exploits1References7
OSV
OSV
added 2018/11/29 4:29 a.m.23 views

CVE-2018-19628

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error...

7.5CVSS6.4AI score
Exploits0References7
CVE
CVE
added 2018/11/29 4:0 a.m.223 views

CVE-2018-19628

Wireshark vulnerability CVE-2018-19628 affects the ZigBee ZCL dissector in Wireshark 2.6.0–2.6.4, causing a crash due to a divide-by-zero in epan/dissectors/packet-zbee-zcl-lighting.c. The issue is fixed by preventing the divide-by-zero in the dissector. Vulnerable component/file: ZigBee ZCL diss...

7.5CVSS7.2AI score0.02194EPSS
Exploits1References7Affected Software1
Cvelist
Cvelist
added 2018/11/29 4:0 a.m.18 views

CVE-2018-19628

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error...

7.3AI score0.02194EPSS
Exploits1References7
AlpineLinux
AlpineLinux
added 2018/11/29 4:0 a.m.30 views

CVE-2018-19628

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error...

7.5CVSS7.4AI score0.02194EPSS
Exploits1
Debian CVE
Debian CVE
added 2018/11/29 4:0 a.m.19 views

CVE-2018-19628

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error...

7.5CVSS2AI score0.02194EPSS
Exploits1
CNVD
CNVD
added 2018/11/29 12:0 a.m.2 views

Wireshark ZigBee ZCL Parser Denial of Service Vulnerability (CNVD-2018-24492)

Wireshark formerly Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.ZigBee ZCL dissector is one of the cluster library parsers. A security vulnerability exis...

7.5CVSS7.4AI score0.02194EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2018/11/29 12:0 a.m.28 views

Wireshark 'ZigBee ZCL' Dissector Denial of Service Vulnerability (wnpa-sec-2018-57) - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS7.5AI score0.02194EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2018/11/29 12:0 a.m.30 views

Wireshark 'ZigBee ZCL' Dissector Denial of Service Vulnerability (wnpa-sec-2018-57) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS7.4AI score0.02194EPSS
Exploits1References1
Kaspersky
Kaspersky
added 2018/11/27 12:0 a.m.68 views

KLA11377 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A heap buffer over-read vulnerability in the Wireshark dissection engine can be...

7.5CVSS8.1AI score0.18204EPSS
Exploits7References9
OSV
OSV
added 2018/08/28 5:29 p.m.2 views

CVE-2018-3926

An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process incorrectly handles malformed files existing in its data directory, leading to an infinite...

5.5CVSS5.8AI score0.00072EPSS
Exploits2References2
Prion
Prion
added 2018/08/28 5:29 p.m.20 views

Integer overflow

An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process incorrectly handles malformed files existing in its data directory, leading to an infinite...

4.9CVSS5.4AI score0.00072EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2018/08/28 5:0 p.m.11 views

CVE-2018-3926

An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process incorrectly handles malformed files existing in its data directory, leading to an infinite...

5.3CVSS5.4AI score0.00072EPSS
Exploits2References2
CVE
CVE
added 2018/08/28 5:0 p.m.58 views

CVE-2018-3926

CVE-2018-3926 describes an integer underflow/loop condition in the Hub Core’s ZigBee firmware update routine on Samsung SmartThings Hub STH-ETH-250 (firmware 0.20.17). The vulnerable component is the hubCore binary when it processes the ZigBee update files in /hub/data/hubcore/, where a size unde...

5.5CVSS5.4AI score0.00072EPSS
Exploits2References2Affected Software1
Positive Technologies
Positive Technologies
added 2018/08/28 12:0 a.m.2 views

PT-2018-16318 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17 Description: The issue is related to an integer underflow vulnerability in the ZigBee firmware update routine of the hubCore binary. This vulnerability is triggered when the hubCo...

5.5CVSS5.1AI score0.00072EPSS
Exploits2References3
CNVD
CNVD
added 2018/07/31 12:0 a.m.1 views

Samsung SmartThings Hub Integer Overflow Vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung South Korea. An integer overflow vulnerability exists in the ZigBee firmware update routine for the hubCore binary in Samsung SmartThings Hub, which stems from the hubCore process failing to properly handle malformed files in...

5.5CVSS5.5AI score0.00072EPSS
Exploits2References1
seebug.org
seebug.org
added 2018/07/30 12:0 a.m.548 views

Samsung SmartThings Hub hubCore Google Breakpad backtrace.io information disclosure vulnerability(CVE-2018-3927)

Summary An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub. When hubCore crashes, Google Breakpad is used to record minidumps, which are sent over an insecure HTTPS connection to the backtrace.io service, leading to...

0.4AI score0.00352EPSS
Exploits2
Rows per page
Query Builder