Tagged: Cybersecurity Alert

Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/issues/21066

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/issues/21122

AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/issues/21111

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/issues/21112

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/issues/21113

The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by dhclient, e.g., after a system restart,...

Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c. More information : https://github.com/mm2/Little-CMS/commit/6a686019825a89b715d16671f18d049523354176

ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/issues/21077

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/issues/21088

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution More information : https://gitlab.com/wireshark/wireshark/-/issues/21090

FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/issues/21070

Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result,...

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/work_items/21206

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service More information : https://gitlab.com/wireshark/wireshark/-/work_items/21207