Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
a330e913ee099cb9c586ce1b9267647fc566c1ab - http://seclists.org/bugtraq/2017/Jul/3 - http://www.securitytracker.com/id/1038814 - https://github.com/webmin/webmin/commit/c2d4a90639afb2403979aa91ba75cb332ae16d1b - http://www.securityfocus.com/bid/99373 - http://www.webmin.com/changes.html
CVE ID: CVE-2017-9314 State: PUBLISHED Published: 2017-11-13T16:00:00Z Last Updated: 2024-09-16T16:38:14.255Z Vendors: Dahua Technologies Products: NVR50XX, VR52XX, VR54XX, VR58XX Problem Types: Authentication vulnerability Description: Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message. Additional Analyst Notes: - CVE Program Container: References: - http://www.dahuasecurity.com/annoucementsingle/security-advisory--authentication-vulnerability-found-in-some-dahua-nvr_14731_211
ww.dahuasecurity.com/annoucementsingle/security-advisory--authentication-vulnerability-found-in-some-dahua-nvr_14731_211.html
CVE ID: CVE-2017-9315 State: PUBLISHED Published: 2017-11-28T19:00:00Z Last Updated: 2024-09-17T02:31:08.983Z Vendors: Dahua Technologies Products: Dahua IP Camera and IP PTZ IPC-HFW1XXX, IPC-HDW1XXX, IPC-HDBW1XXX, IPC-HFW2XXX, IPC-HDW2XXX, IPC-HDBW2XXX, IPC-HFW4XXX, IPC-HDW4XXX, IPC-HDBW4XXX, IPC-HF5XXX, IPC-HFW5XXX, IPC-HDW5XXX, IPC-HDBW5XXX, IPC-HF8XXX, IPC-HFW8XXX, IPC-HDBW8XXX, IPC-EBW8XXX, IPC-PFW8xxx, IPC-PDBW8xxx, IPC-HUM8xxx, PSD8xxxx, DH-SD2XXXXX, DH-SD4XXXXX, DH-SD5XXXXX, DH-SD6XXXXX Problem Types: risk of sensitive information leakage Description: Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua
hua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html
CVE ID: CVE-2017-9316 State: PUBLISHED Published: 2017-11-27T17:00:00Z Last Updated: 2024-09-16T22:29:39.302Z Vendors: Dahua Technologies Products: IPC-HDW4300S\NVR11HS\IPC-HFW4X00\IPC-HDW4X00\IPC-HDBW4X00\IPC-HF5X00\IPC-HFW5X00\IPC-HDW5X00\IPC-HDBW5X00\NVR11HS Problem Types: Firmware upgrade authentication bypass vulnerability Description: Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit)
ning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.dahuasecurity.com/annoucementsingle/security-advisory--high-risk-vulnerability-found-in-dahua-ipc-hdw4300s-and-some-ip-products_14731_231.html
CVE ID: CVE-2017-9317 State: PUBLISHED Published: 2018-05-23T15:00:00Z Last Updated: 2024-09-16T19:36:50.725Z Vendors: Dahua Technologies Products: XVR 5x04, XVR 5x08, XVR 5x16, XVR 7x16, IPC-HDBW4XXX, IPC-HDBW5XXX Problem Types: Privilege escalation Description: Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/annoucementNotice/337
CVE ID: CVE-2017-9321 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-9322 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-9323 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-9324 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T17:02:44.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URLs in question contain index.pl?Action=Installer with ;Subaction=Intro or ;Subaction=Start or ;Subaction=System appended at the end. Additional Analyst Notes: - CVE Program Container: References: - https://www.otrs.com/security-adviso
pended at the end. Additional Analyst Notes: - CVE Program Container: References: - https://www.otrs.com/security-advisory-2017-03-security-update-otrs-versions/ - http://www.debian.org/security/2017/dsa-3876 - https://packetstormsecurity.com/files/142862/OTRS-Install-Dialog-Disclosure.html
CVE ID: CVE-2017-9325 State: PUBLISHED Published: 2019-07-03T16:23:05 Last Updated: 2024-08-05T17:02:44.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
CVE ID: CVE-2017-9326 State: PUBLISHED Published: 2019-07-03T16:17:43 Last Updated: 2024-08-05T17:02:44.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
CVE ID: CVE-2017-9327 State: PUBLISHED Published: 2019-07-03T16:14:29 Last Updated: 2024-08-05T17:02:44.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secret data of processes managed by CM is not secured by file permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
CVE ID: CVE-2017-9328 State: PUBLISHED Published: 2017-09-15T20:00:00 Last Updated: 2024-08-05T17:02:44.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/hybriz/63bbe2d963e531357aca353c74dd1ad5
CVE ID: CVE-2017-9330 State: PUBLISHED Published: 2017-06-08T16:00:00 Last Updated: 2024-08-05T17:02:44.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3920 - http://www.securityfocus.com/bid/98779 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201706-03 - http://www.openwa
ts.debian.org/debian-lts-announce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201706-03 - http://www.openwall.com/lists/oss-security/2017/06/01/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1457697 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=26f670a244982335cc08943fb1ec099a2c81e42d
CVE ID: CVE-2017-9331 State: PUBLISHED Published: 2017-06-01T04:53:00 Last Updated: 2024-08-05T17:02:44.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Utils/RecordBrowser/RecordBrowserCommon_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Telaxus/EPESI/issues/193 - https://github.com/Telaxus/EPESI/commit/dda3e5f3843e80fe9ed36115f4fe72c06a3a41bc
CVE ID: CVE-2017-9332 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-05T17:02:44.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/pivot-weblog/code/4487/
CVE ID: CVE-2017-9333 State: PUBLISHED Published: 2017-09-18T01:00:00 Last Updated: 2024-08-05T17:02:44.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers to an attacker-controlled web site with a Trojan horse package. This has security implications in cases where untrusted users can trigger CallOPKG calls, and these users can enter an arbitrary URL in an input field, even though that input field was only intended for a package name. This threat model may be relevant in the latest versions of third-party products that bund
intended for a package name. This threat model may be relevant in the latest versions of third-party products that bundle OpenWebif, i.e., set-top box products. The issue of Trojan horse packages does NOT have security implications in cases where the attacker has full OpenWebif access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/619 - https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/621
CVE ID: CVE-2017-9334 State: PUBLISHED Published: 2017-06-01T04:53:00 Last Updated: 2024-08-05T17:02:44.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4.13, which allows an attacker to cause a denial of service by passing an improper list to an application that calls "length" on it. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/chicken-hackers/2017-05/msg00099.html - http://lists.nongnu.org/archive/html/chicken-announce/2017-05/msg00000.html
CVE ID: CVE-2017-9336 State: PUBLISHED Published: 2017-06-01T04:53:00 Last Updated: 2024-08-05T17:02:44.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post. Additional Analyst Notes: - CVE Program Container: References: - http://lncken.cn/?p=258
CVE ID: CVE-2017-9337 State: PUBLISHED Published: 2017-06-01T04:53:00 Last Updated: 2024-08-05T17:02:44.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post. Additional Analyst Notes: - CVE Program Container: References: - http://lncken.cn/?p=279
CVE ID: CVE-2017-9338 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2024-08-05T17:02:44.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. To be exploitable a user has to write or paste malicious content into the search dialogue. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory/?id=oc-sa-2017-007 - http://www.securityfocus.com/bid/99322
CVE ID: CVE-2017-9339 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2024-08-05T17:02:44.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory/?id=oc-sa-2017-005
CVE ID: CVE-2017-9340 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2024-08-05T17:02:44.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before 10.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/166581 - https://owncloud.org/security/advisory/?id=oc-sa-2017-006
CVE ID: CVE-2017-9343 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98797 - https://www.wireshark.org/security/wnpa-sec-2017-30.html - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1678 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13725 - http://www.securitytracker.com/id/1038612 - https://code.wireshark.or
ugs.wireshark.org/bugzilla/show_bug.cgi?id=13725 - http://www.securitytracker.com/id/1038612 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=27556320b41904716b9c9f73ef8f4fe705d1e669
CVE ID: CVE-2017-9344 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed in epan/dissectors/packet-btl2cap.c by validating an interval value. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13701 - https://www.wireshark.org/security/wnpa-sec-2017-29.html - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1539 - http://www.securitytracker.com/id/1038612 - https://code.wireshark.org/review/gitweb?p=wireshark.g
sues/detail?id=1539 - http://www.securitytracker.com/id/1038612 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6308ae03d82a29a2e3d75e1c325c8a9f6c44dcdf - http://www.securityfocus.com/bid/98796 - https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html
CVE ID: CVE-2017-9345 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98798 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13633 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1206 - https://www.wireshark.org/security/wnpa-sec-2017-26.html - http://www.securitytracker.com/id/1038612 - https
l?id=1206 - https://www.wireshark.org/security/wnpa-sec-2017-26.html - http://www.securitytracker.com/id/1038612 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e280c9b637327a65d132bfe72d917b87e6844eb5
CVE ID: CVE-2017-9346 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c0bd15bd46a95c5b7dce02fe23c594429bb6c7e - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1200 - http://www.securityfocus.com/bid/98799 - https://www.wireshark.org/security/wnpa-sec-2017-25.html
sues/detail?id=1200 - http://www.securityfocus.com/bid/98799 - https://www.wireshark.org/security/wnpa-sec-2017-25.html - http://www.securitytracker.com/id/1038612 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13631
CVE ID: CVE-2017-9347 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1216 - https://www.wireshark.org/security/wnpa-sec-2017-31.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13637 - https://www.exploit-db.com/exploits/42124/ - http://www.securitytracker.com/id/1038612 - https://code.wi
.cgi?id=13637 - https://www.exploit-db.com/exploits/42124/ - http://www.securitytracker.com/id/1038612 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=278e52f26e7e1a23f8d2e8ed98693328c992bdce - http://www.securityfocus.com/bid/98800
CVE ID: CVE-2017-9348 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2017-23.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7fe55f96672b7bf2b4ceb9ae039a0f43eddd3151 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13608 - http://www.securitytracker.com/id/1038612 - http://www.securityfocus.c
gs.wireshark.org/bugzilla/show_bug.cgi?id=13608 - http://www.securitytracker.com/id/1038612 - http://www.securityfocus.com/bid/98801 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1151
CVE ID: CVE-2017-9349 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This was addressed in epan/dissectors/packet-dcm.c by validating a length value. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cb1b6494c44c9e939d9e2554de6b812de395e3f9 - https://www.wireshark.org/security/wnpa-sec-2017-27.html - http://www.securityfocus.com/bid/98803 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1329 - https://bugs.wiresh
ttp://www.securityfocus.com/bid/98803 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1329 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13685 - http://www.securitytracker.com/id/1038612 - https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html
CVE ID: CVE-2017-9350 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by checking for a negative length. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13649 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dbc7cb0bbdd501fa96e0cb98668f6d6bf17ac4e6 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1212 - http://www.securityfocus.c
d501fa96e0cb98668f6d6bf17ac4e6 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1212 - http://www.securityfocus.com/bid/98806 - http://www.securitytracker.com/id/1038612 - https://www.wireshark.org/security/wnpa-sec-2017-28.html
CVE ID: CVE-2017-9351 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1183 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1153 - http://www.securityfocus.com/bid/98808 - https://www.wireshark.org/security/wnpa-sec-2017-24.html - https://bugs.wireshark.org/bu
w.securityfocus.com/bid/98808 - https://www.wireshark.org/security/wnpa-sec-2017-24.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13609 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a6e033c14da13bd5f72dfe07a347586517639d12 - http://www.securitytracker.com/id/1038612 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13628
CVE ID: CVE-2017-9352 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by ensuring that backwards parsing cannot occur. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98804 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8c5e0cee278ff0678b0ebf4b9c2a614974b4029a - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13599 - https://www.wireshark.org/security/wnpa-sec-2017-
74b4029a - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13599 - https://www.wireshark.org/security/wnpa-sec-2017-22.html - http://www.securitytracker.com/id/1038612
CVE ID: CVE-2017-9353 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1303 - http://www.securityfocus.com/bid/98805 - https://www.exploit-db.com/exploits/42123/ - https://www.wireshark.org/security/wnpa-sec-2017-33.html - http://www.securitytracker.com/id/1038612 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4
- http://www.securitytracker.com/id/1038612 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40b2d475c2ad550c1a0f536d5eb30f2a7404c4f0 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13675