CVE-2019-14823
- EPSS 0.29%
- Published 14.10.2019 20:15:10
- Last modified 21.11.2024 04:27:26
A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly ver...
CVE-2019-6465
- EPSS 0.6%
- Published 09.10.2019 16:15:16
- Last modified 21.11.2024 04:46:30
Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 ...
CVE-2019-15166
- EPSS 1.02%
- Published 03.10.2019 17:15:11
- Last modified 21.11.2024 04:28:11
lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
CVE-2018-14470
- EPSS 2.01%
- Published 03.10.2019 16:15:12
- Last modified 21.11.2024 03:49:09
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
- EPSS 0.52%
- Published 03.10.2019 16:15:12
- Last modified 21.11.2024 03:49:59
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
CVE-2018-14880
- EPSS 0.99%
- Published 03.10.2019 16:15:12
- Last modified 21.11.2024 03:49:59
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
CVE-2018-14881
- EPSS 2.94%
- Published 03.10.2019 16:15:12
- Last modified 21.11.2024 03:49:59
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
CVE-2018-14882
- EPSS 1.69%
- Published 03.10.2019 16:15:12
- Last modified 21.11.2024 03:50:00
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
CVE-2018-16227
- EPSS 4.52%
- Published 03.10.2019 16:15:12
- Last modified 21.11.2024 03:52:19
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
CVE-2018-16228
- EPSS 1.54%
- Published 03.10.2019 16:15:12
- Last modified 21.11.2024 03:52:19
The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().