CVE-2023-2857
- EPSS 0.88%
- Veröffentlicht 26.05.2023 21:15:18
- Zuletzt bearbeitet 15.01.2025 16:15:27
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
CVE-2023-2858
- EPSS 1.79%
- Veröffentlicht 26.05.2023 21:15:18
- Zuletzt bearbeitet 03.11.2025 22:16:08
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
CVE-2023-2854
- EPSS 0.88%
- Veröffentlicht 26.05.2023 21:15:17
- Zuletzt bearbeitet 15.01.2025 16:15:27
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
CVE-2023-2855
- EPSS 1.65%
- Veröffentlicht 26.05.2023 21:15:17
- Zuletzt bearbeitet 03.11.2025 22:16:07
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
CVE-2023-2856
- EPSS 1.79%
- Veröffentlicht 26.05.2023 21:15:17
- Zuletzt bearbeitet 03.11.2025 22:16:07
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
CVE-2023-28321
- EPSS 1.81%
- Veröffentlicht 26.05.2023 21:15:16
- Zuletzt bearbeitet 15.01.2025 16:15:26
An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function...
CVE-2023-1667
- EPSS 1.31%
- Veröffentlicht 26.05.2023 18:15:10
- Zuletzt bearbeitet 21.11.2024 07:39:39
A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.
CVE-2023-2002
- EPSS 1.47%
- Veröffentlicht 26.05.2023 17:15:14
- Zuletzt bearbeitet 21.11.2024 07:57:44
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentia...
CVE-2023-32067
- EPSS 1.58%
- Veröffentlicht 25.05.2023 23:15:09
- Zuletzt bearbeitet 21.11.2024 08:02:38
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erro...
CVE-2023-31130
- EPSS 0.39%
- Veröffentlicht 25.05.2023 22:15:09
- Zuletzt bearbeitet 13.02.2025 17:16:26
c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration p...