Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
or that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1060.html - http://marc.info/?l=bugtraq&m=137545592101387&w=2 - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16840 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19441 - http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html - http://lists.opens
.oval%3Adef%3A19441 - http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html - http://marc.info/?l=bugtraq&m=137545505800971&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19413 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html - http://secunia.com/advisories/54154 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://h20000.www2.hp.com/bizsupport/TechSupport
00.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/4c3d38927a26 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19295 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html - http://www.securityfocus.com/bid/60659 - http://rhn.redhat.com/errata/RHSA-2013-1059.html - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html - http://rhn.redhat.com/errata/RHSA-2013-1081.html - http://www.us-cert.gov/ncas/alerts/TA13-169A - http://advisories.mageia.org/MGASA-2013-
com/errata/RHSA-2013-1081.html - http://www.us-cert.gov/ncas/alerts/TA13-169A - http://advisories.mageia.org/MGASA-2013-0185.html - http://rhn.redhat.com/errata/RHSA-2013-0963.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:183 - https://bugzilla.redhat.com/show_bug.cgi?id=975102 - http://www-01.ibm.com/support/docview.wss?uid=swg21642336 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html
CVE ID: CVE-2013-2472 State: PUBLISHED Published: 2013-06-18T22:00:00 Last Updated: 2024-08-06T15:36:46.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaste
or that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1060.html - http://marc.info/?l=bugtraq&m=137545592101387&w=2 - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html - https://oval.cisecurity.org/repository/search/definit
ts.opensuse.org/opensuse-security-announce/2013-07/msg00028.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18742 - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3cd4bec64e31 - http://marc.info/?l=bugtraq&m=137545505800971&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html - http://secunia.com/advisories/54154 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html - https://ova
cument.jsp?objectID=c03898880 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19543 - http://www.securityfocus.com/bid/60656 - http://rhn.redhat.com/errata/RHSA-2013-1059.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16712 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html - http://rhn.redhat.com/errata/RHSA-2013-1081.html - http://www.us-cert.gov/ncas/alerts/TA13-169A - http://advisories.mageia.org/MGASA-2013-0185.html - http://rhn.redhat.com/errata/RHSA-2013-0963.html - https://oval.cisecurity.org/rep
ies.mageia.org/MGASA-2013-0185.html - http://rhn.redhat.com/errata/RHSA-2013-0963.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18846 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html - http://rhn.redhat.com/errata/RHSA-2013-1456.html - https://bugzilla.redhat.com/show_bug.cgi?id=975107 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:183 - http://www-01.ibm.com/support/docview.wss?uid=swg21642336 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html
CVE ID: CVE-2013-2473 State: PUBLISHED Published: 2013-06-18T22:00:00 Last Updated: 2024-08-06T15:36:46.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster
or that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D. Additional Analyst Notes: - CVE Program Container: References: - http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/259d4998ce2f - http://rhn.redhat.com/errata/RHSA-2013-1060.html - http://marc.info/?l=bugtraq&m=137545592101387&w=2 - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg0
org/opensuse-security-announce/2013-07/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html - http://marc.info/?l=bugtraq&m=137545505800971&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17189 - http://secunia.com/advisories/54154 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18888 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898
hSupport/Document.jsp?objectID=c03898880 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html - http://rhn.redhat.com/errata/RHSA-2013-1059.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19600 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19652 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=975110 - http://rhn.redhat.com/errata/RHSA-2013-1081.html - http://www.us-cert.gov/ncas/alerts/TA13-169A - http://advisories.mageia.org
/rhn.redhat.com/errata/RHSA-2013-1081.html - http://www.us-cert.gov/ncas/alerts/TA13-169A - http://advisories.mageia.org/MGASA-2013-0185.html - http://www.securityfocus.com/bid/60623 - http://rhn.redhat.com/errata/RHSA-2013-0963.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:183 - http://www-01.ibm.com/support/docview.wss?uid=swg21642336 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html
CVE ID: CVE-2013-2474 State: PUBLISHED Published: 2020-01-27T21:46:07 Last Updated: 2024-08-06T15:36:46.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58753 - http://www.exploit-db.com/exploits/24906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83062
CVE ID: CVE-2013-2475 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
e-updates/2013-03/msg00077.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16627 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8274 - http://www.wireshark.org/security/wnpa-sec-2013-10.html
CVE ID: CVE-2013-2476 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a packet with a header that is too short. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://www.wireshark.org/security/wnpa-sec-2013-11.html - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://
13-11.html - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://anonsvn.wireshark.org/viewvc/trunk-1.8/epan/dissectors/packet-hartip.c?r1=47778&r2=47777&pathrev=47778 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=47778 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8360 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15838
CVE ID: CVE-2013-2477 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16589 - http://www.wireshark.org/security/wnpa-sec-2013-12.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/52471 - http://www
ml - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=47888 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8383
CVE ID: CVE-2013-2478 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_server_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service (application crash) via a malformed packet that (1) triggers an integer overflow or (2) has embedded '\0' characters in a string. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc/trunk-1.8/epan/dissectors/packet-ms-mms.c?r1=47981&r2
ogram Container: References: - http://anonsvn.wireshark.org/viewvc/trunk-1.8/epan/dissectors/packet-ms-mms.c?r1=47981&r2=47980&pathrev=47981 - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://www.wireshark.org/security/wnpa-sec-2013-13.html - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16447 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=47981 - https://bugs.wireshark.org/bugzilla/show
ef%3A16447 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=47981 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8382 - http://www.debian.org/security/2013/dsa-2644
CVE ID: CVE-2013-2479 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_mpls_echo_tlv_dd_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via invalid Sub-tlv data. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16376 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secun
on/oval%3Aorg.mitre.oval%3Adef%3A16376 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/52471 - http://www.wireshark.org/security/wnpa-sec-2013-14.html - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=46391 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mpls-echo.c?r1=46391&r2=46390&pathrev=46391
CVE ID: CVE-2013-2480 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16630 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8332 - h
lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8332 - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://www.wireshark.org/security/wnpa-sec-2013-15.html - http://www.debian.org/security/2013/dsa-2644
CVE ID: CVE-2013-2481 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the dissect_mount_dirpath_call function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfs_file_name_snooping is enabled, allows remote attackers to cause a denial of service (application crash) via a negative length value. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8335 - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://lists.opensuse
org/bugzilla/show_bug.cgi?id=8335 - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16420 - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=47672 - http://www.wireshark.org/security/wnpa-sec-2013-16.html - http://www.debian.org/security/2013/dsa-2644 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mount.c?r1=47672&r2=47671&pathrev=4
ity/2013/dsa-2644 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mount.c?r1=47672&r2=47671&pathrev=47672
CVE ID: CVE-2013-2482 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2013-17.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8337 - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/52471 - https://oval.c
http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/52471 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16677 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html
CVE ID: CVE-2013-2483 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The acn_add_dmp_data function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via an invalid count value in ACN_DMP_ADT_D_RE DMP data. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc?view=revision&revision=47692 - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://lists.opensuse.org/opensuse-updates/
ision=47692 - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://www.wireshark.org/security/wnpa-sec-2013-18.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-acn.c?r1=47692&r2=47691&pathrev=47692 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16411 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8340 - http://www.debian.org/security/2013/dsa-2644
CVE ID: CVE-2013-2484 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16469 - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://www.wireshark.org/security/wnpa-sec-2013-19.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - https://bugs
ark.org/security/wnpa-sec-2013-19.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8346 - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://www.debian.org/security/2013/dsa-2644
CVE ID: CVE-2013-2485 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/52471 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16529 - http://www.wireshark.org/docs/relnot
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16529 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://www.wireshark.org/security/wnpa-sec-2013-20.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8359
CVE ID: CVE-2013-2486 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/53425 - https://bugs.wireshark.org/bugzilla/show_b
pensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/53425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8364 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - http://www.wireshark.org/security/wnpa-sec-2013-21.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16109 - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-reload.c?r1=47805&r2=47804&pathrev=47805 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=47805 - h