Page 3 of 29 results (0.013 seconds)

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 1

CVE-2020-17498 – Ubuntu Security Notice USN-6262-1

https://notcve.org/view.php?id=CVE-2020-17498

13 Aug 2020 — In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression. En Wireshark versiones 3.2.0 hasta 3.2.5, el disector del protocolo Kafka podría bloquearse. Esto fue abordado en el archivo epan/dissectors/packet-kafka.c evitando una doble liberación durante la descompresión de LZ4 It was discovered that Wireshark did not properly handle certain NFS packages when certain configuration options were ... • http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00035.html • CWE-415: Double Free •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-15466 – Ubuntu Security Notice USN-6262-1

https://notcve.org/view.php?id=CVE-2020-15466

02 Jul 2020 — In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations. En Wireshark versiones 3.2.0 hasta 3.2.4, el disector GVCP podría entrar en un bucle infinito. Esto se abordó en el archivo epan/disectors/packet-gvcp.c asegurando que aumente la compensación en todas las situaciones It was discovered that Wireshark did not properly handle certain NFS packages when certain configuration op... • http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.html • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVSS: 7.5EPSS: 2%CPEs: 8EXPL: 0

CVE-2020-13164 – Ubuntu Security Notice USN-6262-1

https://notcve.org/view.php?id=CVE-2020-13164

19 May 2020 — In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem. En Wireshark versiones 3.2.0 hasta 3.2.3, 3.0.0 hasta 3.0.10 y 2.6.0 hasta 2.6.16, el disector NFS podría bloquearse. Esto se abordó en el archivo epan/dissectors/packet-nfs.c impidiendo la recurrencia excesiva, como por ejemplo, un ciclo en el gráfico de directorio e... • http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.html • CWE-674: Uncontrolled Recursion •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2020-11647 – Gentoo Linux Security Advisory 202007-13

https://notcve.org/view.php?id=CVE-2020-11647

10 Apr 2020 — In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion. En Wireshark versiones 3.2.0 hasta 3.2.2, versiones 3.0.0 hasta 3.0.9 y versiones 2.6.0 hasta 2.6.15, el disector BACapp podría bloquearse. Esto fue abordado en el archivo epan/disectors/packet-bacapp.c limitando la cantidad de recursión. Multiple vulnerabilities have been found in Wireshark, the worst of which could re... • http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.html • CWE-674: Uncontrolled Recursion •

CVSS: 7.5EPSS: 6%CPEs: 8EXPL: 1

CVE-2020-9428 – Gentoo Linux Security Advisory 202007-13

https://notcve.org/view.php?id=CVE-2020-9428

27 Feb 2020 — In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing. En Wireshark versiones 3.2.0 hasta 3.2.1, versiones 3.0.0 hasta 3.0.8 y versiones 2.6.0 hasta 2.6.14, el disector EAP podría bloquearse. Esto se abordó en el archivo epan/disectors/packet-eap.c mediante el uso de un análisis sscanf más cuidadoso. Multiple vulnerabilities have been found in Wireshark, the worst of which could... • http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html • CWE-125: Out-of-bounds Read •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-9429 – Gentoo Linux Security Advisory 202007-13

https://notcve.org/view.php?id=CVE-2020-9429

27 Feb 2020 — In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value. En Wireshark versiones 3.2.0 hasta 3.2.1, el disector WireGuard podría bloquearse. Esto se abordó en el archivo epan/disectors/packet-wireguard.c mediante el manejo de la situación en la que determinada estructura de datos presenta un valor NULL intencionalmente. Multiple vulnerabilities have been f... • http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html • CWE-476: NULL Pointer Dereference •

CVSS: 7.5EPSS: 3%CPEs: 8EXPL: 2

CVE-2020-9430 – Gentoo Linux Security Advisory 202007-13

https://notcve.org/view.php?id=CVE-2020-9430

27 Feb 2020 — In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field. En Wireshark versiones 3.2.0 hasta 3.2.1, versiones 3.0.0 hasta 3.0.8 y versiones 2.6.0 hasta 2.6.14, el disector WiMax DLMAP podría bloquearse. Esto se abordó en el archivo plugins/epan/wimax/ msg_dlmap.c mediante la comprobación de un campo de longitud. Multiple vulnerabilities have been found in Wireshark, the worst of ... • http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 4%CPEs: 8EXPL: 1

CVE-2020-9431 – Gentoo Linux Security Advisory 202007-13

https://notcve.org/view.php?id=CVE-2020-9431

27 Feb 2020 — In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations. En Wireshark versiones 3.2.0 hasta 3.2.1, versiones 3.0.0 hasta 3.0.8 y versiones 2.6.0 hasta 2.6.14, el disector LTE RRC podría perder memoria. Esto se abordó en el archivo epan/disectors/packet-lte-rrc.c mediante el ajuste de determinadas operaciones de adición. Multiple vulnerabilities have been found in W... • http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html • CWE-401: Missing Release of Memory after Effective Lifetime •

CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 1

CVE-2020-7044

https://notcve.org/view.php?id=CVE-2020-7044

16 Jan 2020 — In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors. En Wireshark versiones 3.2.x anteriores a la versión 3.2.1, el disector WASSP podría bloquearse. Esto fue abordado en el archivo epan/dissectors/packet-wassp.c mediante el uso de )= y (= para resolver errores por un paso. • http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html • CWE-125: Out-of-bounds Read CWE-193: Off-by-one Error •