Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0534 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T04:10:11.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier do not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, a similar issue to CVE-2014-8275. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.
lar issue to CVE-2014-8275. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033298 - http://seclists.org/bugtraq/2015/Aug/84 - http://www.securitytracker.com/id/1033297 - http://www.securityfocus.com/bid/76377
CVE ID: CVE-2015-0535 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T04:10:10.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a similar issue to CVE-2015-0204. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Aug/84 - http://www.securityfocus.com/bid/76377
CVE ID: CVE-2015-0536 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T04:10:11.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allow remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero, a similar issue to CVE-2015-1787. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Aug/84 - http://www.securityfocus.com/bid/76377
CVE ID: CVE-2015-0537 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T04:10:11.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition (Crypto-C ME) before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service (memory corruption or segmentation fault) or possibly have unspecified other impact via crafted base64 data, a similar issue to CVE-2015-0292. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bu
similar issue to CVE-2015-0292. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Aug/84 - http://www.securitytracker.com/id/1033299 - http://www.securityfocus.com/bid/76377
CVE ID: CVE-2015-0538 State: PUBLISHED Published: 2015-05-07T01:00:00 Last Updated: 2024-08-06T04:10:10.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to execute arbitrary commands via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032237 - http://packetstormsecurity.com/files/131749/EMC-AutoStart-5.4.3-5.5.0-Packet-Injection.html - http://seclists.org/bugtraq/2015/May/25 - http://www.kb.cert.org/vuls/id/581276
CVE ID: CVE-2015-0539 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-0540 State: PUBLISHED Published: 2015-05-25T19:00:00 Last Updated: 2024-08-06T04:10:11.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before P44 and 4.5 SP1 before P03 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/May/98
CVE ID: CVE-2015-0541 State: PUBLISHED Published: 2015-06-05T10:00:00 Last Updated: 2024-08-06T04:10:11.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in EMC RSA Web Threat Detection before 5.1 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032477 - http://seclists.org/bugtraq/2015/Jun/18
CVE ID: CVE-2015-0542 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T04:10:11.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033300 - http://seclists.org/bugtraq/2015/Aug/85 - http://www.securityfocus.com/bid/76404
CVE ID: CVE-2015-0543 State: PUBLISHED Published: 2015-07-05T10:00:00 Last Updated: 2024-08-06T04:10:11.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032740 - http://seclists.org/bugtraq/2015/Jun/132
CVE ID: CVE-2015-0544 State: PUBLISHED Published: 2015-07-05T10:00:00 Last Updated: 2024-08-06T04:10:11.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032740 - http://seclists.org/bugtraq/2015/Jun/132
CVE ID: CVE-2015-0545 State: PUBLISHED Published: 2015-06-29T10:00:00 Last Updated: 2024-08-06T04:10:10.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032732 - http://seclists.org/bugtraq/2015/Jun/129
CVE ID: CVE-2015-0546 State: PUBLISHED Published: 2015-06-17T10:00:00 Last Updated: 2024-08-06T04:10:10.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Unified Infrastructure Manager/Provisioning (UIM/P) 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Jun/87 - http://www.securitytracker.com/id/1032589
CVE ID: CVE-2015-0547 State: PUBLISHED Published: 2015-07-04T10:00:00 Last Updated: 2024-08-06T04:10:10.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032769 - http://seclists.org/bugtraq/2015/Jul/10
CVE ID: CVE-2015-0548 State: PUBLISHED Published: 2015-07-04T10:00:00 Last Updated: 2024-08-06T04:10:11.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032769 - http://seclists.org/bugtraq/2015/Jul/10
CVE ID: CVE-2015-0549 State: PUBLISHED Published: 2015-06-28T19:00:00 Last Updated: 2024-08-06T04:10:11.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC Documentum D2 before 4.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032693 - http://seclists.org/bugtraq/2015/Jun/113
CVE ID: CVE-2015-0550 State: PUBLISHED Published: 2015-06-28T19:00:00 Last Updated: 2024-08-06T04:10:10.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EMC Documentum Thumbnail Server 6.7SP1 before P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P01 allows remote attackers to bypass intended Content Server access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032694 - http://seclists.org/bugtraq/2015/Jun/114
CVE ID: CVE-2015-0551 State: PUBLISHED Published: 2015-07-04T14:00:00 Last Updated: 2024-08-06T04:10:10.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst N
23 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032770 - http://seclists.org/bugtraq/2015/Jul/9
CVE ID: CVE-2015-0552 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T04:10:11.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo." Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774580 - http://secunia.com/advisories/62310 - https://bugzilla.gnome.org/show_bug.cgi?id=742331 - http://www.openwall.com/lists/oss-security/2015/01/05/7 - http://lists.opensuse.org/opensuse-upd
how_bug.cgi?id=742331 - http://www.openwall.com/lists/oss-security/2015/01/05/7 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00018.html
CVE ID: CVE-2015-0553 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T04:10:10.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 SP3 allows remote attackers to inject arbitrary web script or HTML via the page_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130008/CMS-Websitebaker-2.8.3-SP3-Cross-Site-Scripting.html - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-03_4.html - https://twitter.com/sroesemann/status/555397239229911040 - http://seclists.org/fulldisclosure/2015/Jan/70 - http://sroesem
tps://twitter.com/sroesemann/status/555397239229911040 - http://seclists.org/fulldisclosure/2015/Jan/70 - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-03.html - http://www.securityfocus.com/bid/72104
CVE ID: CVE-2015-0554 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T04:10:11.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35721 - http://packetstormsecurity.com/files/129828/Pirelli-ADSL2-2-Wireless-Router-P.
ttp://www.exploit-db.com/exploits/35721 - http://packetstormsecurity.com/files/129828/Pirelli-ADSL2-2-Wireless-Router-P.DGA4001N-Information-Disclosure.html
CVE ID: CVE-2015-0555 State: PUBLISHED Published: 2015-02-24T15:00:00 Last Updated: 2024-08-06T04:10:11.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131421/Samsung-iPOLiS-1.12.2-ReadConfigValue-Remote-Code-Execution.html - http://seclists.org/fulldisclosure/2015/Feb/81
CVE ID: CVE-2015-0556 State: PUBLISHED Published: 2015-04-08T18:00:00 Last Updated: 2024-08-06T04:10:11.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:201 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html - http://www.openwall.com/lists/oss-security/2015/01/05/9 - https://security.gentoo.org/glsa/201612-15 - http://www.openwall.com/lists/oss-security/2015/01/03/5 - http://lists.fedorapr
s://security.gentoo.org/glsa/201612-15 - http://www.openwall.com/lists/oss-security/2015/01/03/5 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html - http://www.securityfocus.com/bid/71860 - http://www.debian.org/security/2015/dsa-3213 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774434
CVE ID: CVE-2015-0557 State: PUBLISHED Published: 2015-04-08T18:00:00 Last Updated: 2024-08-06T04:10:11.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:201 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html - http://www.openwall.com/lists/oss-security/2015/01/05/9 - https://securi
rmail/package-announce/2015-April/154605.html - http://www.openwall.com/lists/oss-security/2015/01/05/9 - https://security.gentoo.org/glsa/201612-15 - http://www.openwall.com/lists/oss-security/2015/01/03/5 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html - http://www.debian.org/security/2015/dsa-3213 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html - http://www.securityfocus.com/bid/71895 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774435
CVE ID: CVE-2015-0558 State: PUBLISHED Published: 2020-01-14T16:35:37 Last Updated: 2024-08-06T04:10:10.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6, and possibly other routers, uses "1236790" and the MAC address to generate the WPA key. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129817/Pirelli-Router-P.DG-A4001N-WPA-Key-Reverse-Engineering.html - http://www.exploit-db.com/exploits/35721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99682
CVE ID: CVE-2015-0559 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T04:10:11.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62612 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10720 - https://code.wireshark.org/review/gitweb?p=wire
ries/62612 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10720 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e843c6797db98bfceab382d5d7e76727e1014f5e - http://www.wireshark.org/security/wnpa-sec-2015-01.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html
CVE ID: CVE-2015-0560 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T04:10:10.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62612 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10806 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10806 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a442a1c0e815fd61416cf408bd74d85a042ccc6a - http://www.wireshark.org/security/wnpa-sec-2015-01.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html
CVE ID: CVE-2015-0561 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T04:10:11.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10773 - http://www.wireshark.org/security/wnpa-sec-2015-02.html - http://secunia.com/advisories/62612 - http://www.oracle.com/technetwork/topic
shark.org/security/wnpa-sec-2015-02.html - http://secunia.com/advisories/62612 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8e96830156bea314207b97315ccebd605317f142
CVE ID: CVE-2015-0562 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T04:10:10.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2015-0019.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%
http://advisories.mageia.org/MGASA-2015-0019.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a559f2a050947f793c00159c0cd4d30f403f217c - http://secunia.com/advisories/62612 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:022 - http://www.securityfocus.com/bid/71921 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-1460.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10724 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.debian.org/security/2015/dsa-3141 - http://secunia.com/advisories/62673 - http://www.wireshark.org/
01.html - http://www.debian.org/security/2015/dsa-3141 - http://secunia.com/advisories/62673 - http://www.wireshark.org/security/wnpa-sec-2015-03.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html
CVE ID: CVE-2015-0563 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T04:10:11.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2015-0019.html - http://secunia.com/advisories/62612 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:022 - http://www.oracle.com/technet
a.com/advisories/62612 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:022 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10823 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=611cfd00c283e7a77a2f1fd89c01b0b9f691411b - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.securityfocus.com/bid/71916 - http://www.wireshark.org/security/wnpa-sec-2015-04.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=854157883bd1972e012c65c0418a9732ef5d9fb0 - http://lists.opensuse.org/opensuse-updates/2015-01/ms
hark.git%3Ba=commit%3Bh=854157883bd1972e012c65c0418a9732ef5d9fb0 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html
CVE ID: CVE-2015-0564 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T04:17:31.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2015-0019.html - http://secunia.com/advisories/62612 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:022 - htt