Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7153 State: PUBLISHED Published: 2016-09-06T10:00:00 Last Updated: 2024-08-06T01:50:47.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036741 - http://www.securitytracker.com/id/1036742 - https://tom.vg/papers/heist_blackhat2016.pdf - http://www.securitytracker.com/id/1036
w.securitytracker.com/id/1036742 - https://tom.vg/papers/heist_blackhat2016.pdf - http://www.securitytracker.com/id/1036745 - http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/ - http://www.securitytracker.com/id/1036744 - http://www.securitytracker.com/id/1036743 - http://www.securityfocus.com/bid/92773 - http://www.securitytracker.com/id/1036746
CVE ID: CVE-2016-7154 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:50:47.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.securityfocus.com/bid/92863 - http://xenbits.xen.org/xsa/advisory-188.html - http://www.debian.org/security/2016/dsa-
ww.securityfocus.com/bid/92863 - http://xenbits.xen.org/xsa/advisory-188.html - http://www.debian.org/security/2016/dsa-3663 - http://xenbits.xen.org/xsa/xsa188.patch - http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf - http://support.citrix.com/article/CTX216071 - http://www.securitytracker.com/id/1036754
CVE ID: CVE-2016-7155 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:50:47.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/07/1 - http://www.securityfocus.com/bid/92772 - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00050.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7f61f4690dd153be98900a2a
/archive/html/qemu-devel/2016-09/msg00050.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7f61f4690dd153be98900a2a508b88989e692753 - http://www.openwall.com/lists/oss-security/2016/09/06/2 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-7156 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:50:47.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg01246.html - http://www.openwall.com/lists/oss-security/2016/09/06/3 - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00772.html - http://www.openwall.com/lists/oss-security/
06/3 - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00772.html - http://www.openwall.com/lists/oss-security/2016/09/07/2 - https://security.gentoo.org/glsa/201609-01 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=49adc5d3f8c6bb75e55ebfeab109c5c37dea65e8 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://www.securityfocus.com/bid/92774
CVE ID: CVE-2016-7157 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:50:47.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via vectors involving MPTSAS_CONFIG_PACK. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92775 - https://security.gentoo.org/glsa/201609-01 - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04296.html - http://www.openwall.com/lists/oss-security/2016/09/06/4
://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04296.html - http://www.openwall.com/lists/oss-security/2016/09/06/4 - http://www.openwall.com/lists/oss-security/2016/09/07/3 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=65a8e1f6413a0f6f79894da710b5d6d43361d27d - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04295.html
CVE ID: CVE-2016-7160 State: PUBLISHED Published: 2016-11-03T10:00:00 Last Updated: 2024-08-06T01:50:47.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-SEP-2016 - http://www.securityfocus.com/bid/94120
CVE ID: CVE-2016-7161 State: PUBLISHED Published: 2016-10-05T16:00:00 Last Updated: 2024-08-06T01:50:47.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/23/6 - https://security.gentoo.org/glsa/201611-11 - http://www.openwall.com/lists/oss-security/2016/09/23/8 - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01877.html - http://lists.opensuse.org/opensuse-updates
/23/8 - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01877.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01598.html - http://www.securityfocus.com/bid/93141 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a0d1cbdacff5df4ded16b753b38fdd9da6092968 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-7162 State: PUBLISHED Published: 2016-09-26T15:00:00 Last Updated: 2024-08-06T01:50:47.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92896 - https://git.gnome.org/browse/file-roller/commit/?id=f70be1f41688859ec8dbe266df35a1839ceb96c5 - http://ftp.gnome.org/mirror/gnome.org/sources/file-roller/3.20/file-roller-3.20.3.news - https://bugzilla.gnome.org/show_bug.cgi?id=698554 - ht
rror/gnome.org/sources/file-roller/3.20/file-roller-3.20.3.news - https://bugzilla.gnome.org/show_bug.cgi?id=698554 - http://www.openwall.com/lists/oss-security/2016/09/08/4 - http://www.ubuntu.com/usn/USN-3074-1 - http://ftp.gnome.org/mirror/gnome.org/sources/file-roller/3.21/file-roller-3.21.90.news
CVE ID: CVE-2016-7163 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:50:47.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/08/6 - http://www.securityfocus.com/bid/92897 - http://www.openwall.com/lists/oss-security/2016/09/08/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQ2IIIQSJ3J4MONBOG
/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQ2IIIQSJ3J4MONBOGCG6XHLKKJX2HKM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2T6IQAMS4W65MGP7UW5FPE22PXELTK5D/ - http://rhn.redhat.com/errata/RHSA-2017-0559.html - https://github.com/uclouvain/openjpeg/issues/826 - http://rhn.redhat.com/errata/RHSA-2017-0838.html - https://github.com/uclouvain/openjpeg/commit/ef01f18dfc6780b776d0674ed3e7415c6ef54d24 - http://www.debian.org/security/2016/dsa-3665 - https://github.com/uclouvain/openjpeg/pull/809 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mes
louvain/openjpeg/pull/809 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66BWMMMWXH32J5AOGLAJGZA3GH5LZHXH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4IRSGYMBSHCBZP23CUDIRJ3LBKH6ZJ7/ - https://github.com/uclouvain/openjpeg/commit/c16bc057ba3f125051c9966cf1f5b68a05681de4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGKSEWWWED77Q5ZHK4OA2EKSJXLRU3MK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYLOX7PZS3ZUHQ6RGI3M6H27B7I5ZZ26/
CVE ID: CVE-2016-7164 State: PUBLISHED Published: 2017-02-07T15:00:00 Last Updated: 2024-08-06T01:50:47.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and crash) via a crafted GZIP response. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/arvidn/libtorrent/pull/1022 - http://www.openwall.com/lists/oss-security/2016/09/08/7 - https://github.com/arvidn/libtorrent/issues/1021 - http://www.openwall.com/lists/oss-security/2016/09/08/1 - http://www.securityfocus.com/bid/92891
CVE ID: CVE-2016-7165 State: PUBLISHED Published: 2016-11-15T19:00:00 Last Updated: 2024-08-06T01:50:47.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All versions < V14), SIMATIC PCS 7 V7.1 (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 V5.X (All versions < V5.5 SP4 HF11), SIMATIC WinCC (TIA Portal) Basic, Comfort, Advanced (All versions < V14),
IC STEP 7 V5.X (All versions < V5.5 SP4 HF11), SIMATIC WinCC (TIA Portal) Basic, Comfort, Advanced (All versions < V14), SIMATIC WinCC (TIA Portal) Professional V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) Professional V14 (All versions < V14 SP1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1), SIMATIC WinCC V7.0 SP2 and earlier versions (All versions < V7.0 SP2 Upd 12), SIMATIC WinCC V7.0 SP3 (All versions < V7.0 SP3 Upd 8), SIMATIC WinCC V7.2 (All versions < V7.2 Upd 14), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 11), SIMATIC WinCC V7.4 (All versions < V7.4 SP1), SIMIT V9.0 (All versions < V9.0
C WinCC V7.3 (All versions < V7.3 Upd 11), SIMATIC WinCC V7.4 (All versions < V7.4 SP1), SIMIT V9.0 (All versions < V9.0 SP1), SINEMA Remote Connect Client (All versions < V1.0 SP3), SINEMA Server (All versions < V13 SP2), SOFTNET Security Client V5.0 (All versions), Security Configuration Tool (SCT) (All versions < V4.3 HF1), TeleControl Server Basic (All versions < V3.0 SP2), WinAC RTX 2010 SP2 (All versions), WinAC RTX F 2010 SP2 (All versions). Unquoted service paths could allow local Microsoft Windows operating system users to escalate their privileges if the affected products are not installed under their default path ("C:\Program Files\*" or the localized equivalent). Additional Analy
products are not installed under their default path ("C:\Program Files\*" or the localized equivalent). Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-313-02 - http://securityaffairs.co/wordpress/53266/security/cve-2016-7165-siemens.html - http://www.securityfocus.com/bid/94158 - https://cert-portal.siemens.com/productcert/pdf/ssa-701708.pdf
CVE ID: CVE-2016-7166 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:50:47.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1844.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.openwall.com/lists/oss-security/2016/09/08/18 - https://github.com/libarchive/libarchive/commit/6e06b1c89dd0d16f7
://www.openwall.com/lists/oss-security/2016/09/08/18 - https://github.com/libarchive/libarchive/commit/6e06b1c89dd0d16f74894eac4cfc1327a06ee4a0 - https://github.com/libarchive/libarchive/issues/660 - https://bugzilla.redhat.com/show_bug.cgi?id=1347086 - http://rhn.redhat.com/errata/RHSA-2016-1850.html - http://www.openwall.com/lists/oss-security/2016/09/08/15 - https://security.gentoo.org/glsa/201701-03 - https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207362 - http://www.securityfocus.com/bid/92901
CVE ID: CVE-2016-7167 State: PUBLISHED Published: 2016-10-07T14:00:00 Last Updated: 2024-08-06T01:50:47.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZMRWVISG7VUCYRMF23A2UHMYD72VQWAK/ - http://www.slackware.com/security/viewer.php?l=slackware-
.fedoraproject.org/message/ZMRWVISG7VUCYRMF23A2UHMYD72VQWAK/ - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.538632 - https://access.redhat.com/errata/RHSA-2018:3558 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3IU2FRXQNU6UJIQT4NGLWWTP2GJQXO7/ - http://www.securityfocus.com/bid/92975 - https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html - http://www.securitytracker.com/id/1036813 - https://curl.haxx.se/docs/adv_20160914.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://access.redhat.com/errata/RHSA-2017:2016 - https://access.redhat.c
rk/security-advisory/cpuoct2018-4428296.html - https://access.redhat.com/errata/RHSA-2017:2016 - https://access.redhat.com/errata/RHSA-2018:2486 - https://security.gentoo.org/glsa/201701-47 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTH54DFOS4TSYPG5XKJDGAG4XPAR4T7M/
CVE ID: CVE-2016-7168 State: PUBLISHED Published: 2017-01-05T02:00:00 Last Updated: 2024-08-06T01:50:47.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WordPress/WordPress/commit/c9e60dab176635d4bfaaf431c0ea891e4726d6e0 - https://sumofpwn.nl/advisory/2016/persistent_cross_site_scripting_vulnerability_in_wordpr
35d4bfaaf431c0ea891e4726d6e0 - https://sumofpwn.nl/advisory/2016/persistent_cross_site_scripting_vulnerability_in_wordpress_due_to_unsafe_processing_of_file_names.html - https://wpvulndb.com/vulnerabilities/8615 - http://www.openwall.com/lists/oss-security/2016/09/08/24 - http://www.securityfocus.com/bid/92841 - https://wordpress.org/news/2016/09/wordpress-4-6-1-security-and-maintenance-release/ - https://codex.wordpress.org/Version_4.6.1 - http://www.debian.org/security/2016/dsa-3681 - http://www.openwall.com/lists/oss-security/2016/09/08/19
CVE ID: CVE-2016-7169 State: PUBLISHED Published: 2017-01-05T02:00:00 Last Updated: 2024-08-06T01:50:47.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WordPress/WordPress/commit/54720a14d85bc1197ded7cb09bd3ea790caa0b6e - http://www.securityfocus.com/bid/92841 - https://wordpress.org/news/2016/09/wordpress-4-6-1-security-and-
ea790caa0b6e - http://www.securityfocus.com/bid/92841 - https://wordpress.org/news/2016/09/wordpress-4-6-1-security-and-maintenance-release/ - https://codex.wordpress.org/Version_4.6.1 - https://wpvulndb.com/vulnerabilities/8616 - http://www.debian.org/security/2016/dsa-3681
CVE ID: CVE-2016-7170 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:50:47.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92904 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=167d97a3def77ee2dbf6e908b0ecbfe2103977db - http://lists.opensuse.org/
4 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=167d97a3def77ee2dbf6e908b0ecbfe2103977db - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg01764.html - http://www.openwall.com/lists/oss-security/2016/09/09/7 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://www.openwall.com/lists/oss-security/2016/09/09/4
CVE ID: CVE-2016-7171 State: PUBLISHED Published: 2016-12-05T18:00:00 Last Updated: 2024-08-06T01:50:47.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20161129-0001 - http://www.securitytracker.com/id/1037391 - http://www.securityfocus.com/bid/94659
CVE ID: CVE-2016-7172 State: PUBLISHED Published: 2016-12-21T22:00:00 Last Updated: 2024-08-06T01:50:47.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95069 - https://kb.netapp.com/support/s/article/NTAP-20161220-0001 - http://www.securitytracker.com/id/1037530
CVE ID: CVE-2016-7175 State: PUBLISHED Published: 2016-09-09T10:00:00 Last Updated: 2024-08-06T01:50:47.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2016-50.html - https://code.wireshark.org/review/16965 - http://www.securitytracker.com/id/1036760 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1396f6ad5
//www.securitytracker.com/id/1036760 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1396f6ad555178f6b81cc1a65f9cb37b2d99aebf - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11850
CVE ID: CVE-2016-7176 State: PUBLISHED Published: 2016-09-09T10:00:00 Last Updated: 2024-08-06T01:50:47.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/16852 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12700 - https://www.wireshark.org/security/wnpa-sec-2016-51.html - http://www.securitytracker.com/id/1036
how_bug.cgi?id=12700 - https://www.wireshark.org/security/wnpa-sec-2016-51.html - http://www.securitytracker.com/id/1036760 - http://www.debian.org/security/2016/dsa-3671 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6d8261994bb928b7e80e3a2478a3d939ea1ef373
CVE ID: CVE-2016-7177 State: PUBLISHED Published: 2016-09-09T10:00:00 Last Updated: 2024-08-06T01:50:47.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2016-52.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750 - https://code.wireshark.org/review/17096 - http://www.securitytracker.com/id/10
hark.org/bugzilla/show_bug.cgi?id=12750 - https://code.wireshark.org/review/17096 - http://www.securitytracker.com/id/1036760 - http://www.debian.org/security/2016/dsa-3671 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e37b271c473e1cbd01d62ebe1f3b011fc9fe638
CVE ID: CVE-2016-7178 State: PUBLISHED Published: 2016-09-09T10:00:00 Last Updated: 2024-08-06T01:50:47.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2016-53.html - https://code.wireshark.org/review/17094 - http://www.securitytracker.com/id/1036760 - http://www.debian.org/security/2016/ds
s://code.wireshark.org/review/17094 - http://www.securitytracker.com/id/1036760 - http://www.debian.org/security/2016/dsa-3671 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=315bba7c645b75af24215c6303d187b188610bba - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751