Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5322 State: PUBLISHED Published: 2017-04-11T18:00:00 Last Updated: 2024-08-06T01:01:00.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91204 - http://www.securityfocus.com/bid/91205 - http://www.openwall.com/lists/oss-security/2016/06/15/2 - https://security.gentoo.org/glsa/201701-16 - https://bugzilla.redhat.com/show_bug.cgi?id=1346694 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-5323 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T01:00:58.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91196 - http://www.openwall.com/lists/oss-security/2016/06/15/6 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html - https://security.gentoo.org/glsa/201701-16 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-5325 State: PUBLISHED Published: 2016-10-10T16:00:00 Last Updated: 2024-08-06T01:00:59.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nodejs/node/commit/c0f13e56a20f9bde5a67d873a7f9564487160762 - https://access.redhat.com/errata/RHSA-2016:2101 - https://nodejs.org/en/blog/vulnerability/sep
a67d873a7f9564487160762 - https://access.redhat.com/errata/RHSA-2016:2101 - https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ - http://www.securityfocus.com/bid/93483 - https://security.gentoo.org/glsa/201612-43 - http://rhn.redhat.com/errata/RHSA-2017-0002.html - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html
CVE ID: CVE-2016-5328 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:00:58.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93886 - http://www.vmware.com/security/advisories/VMSA-2016-0017.html - http://www.securitytracker.com/id/1037102
CVE ID: CVE-2016-5329 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:00:57.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037103 - http://www.vmware.com/security/advisories/VMSA-2016-0017.html - http://www.securityfocus.com/bid/93888
CVE ID: CVE-2016-5330 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-06T01:00:58.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036544 - http://www.securitytracker.com/id/1036619 - http://www.securityfoc
rences: - http://www.securitytracker.com/id/1036544 - http://www.securitytracker.com/id/1036619 - http://www.securityfocus.com/bid/92323 - http://www.vmware.com/security/advisories/VMSA-2016-0010.html - http://www.securityfocus.com/archive/1/539131/100/0/threaded - http://www.securitytracker.com/id/1036545 - https://securify.nl/advisory/SFY20151201/dll_side_loading_vulnerability_in_vmware_host_guest_client_redirector.html - http://www.rapid7.com/db/modules/exploit/windows/misc/vmhgfs_webdav_dll_sideload
CVE ID: CVE-2016-5331 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-06T01:00:59.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036543 - http://www.securityfocus.com/bid/92324 - http://www.securitytracker.com/id/1036544 - http://www.securityfocus.com/archive/1/539128/100/0/threaded - http://www.vmware.com/security/advisories/VMSA-2016-0010.html - http
securityfocus.com/archive/1/539128/100/0/threaded - http://www.vmware.com/security/advisories/VMSA-2016-0010.html - http://seclists.org/fulldisclosure/2016/Aug/38 - http://www.securitytracker.com/id/1036545 - http://packetstormsecurity.com/files/138211/VMware-vSphere-Hypervisor-ESXi-HTTP-Response-Injection.html
CVE ID: CVE-2016-5332 State: PUBLISHED Published: 2016-08-31T01:00:00 Last Updated: 2024-08-06T01:00:57.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036619 - http://www.vmware.com/security/advisories/VMSA-2016-0011.html - http://www.securityfocus.com/bid/92448
CVE ID: CVE-2016-5333 State: PUBLISHED Published: 2016-08-31T01:00:00 Last Updated: 2024-08-06T01:00:59.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036628 - http://www.securityfocus.com/bid/92474 - http://www.vmware.com/security/advisories/VMSA-2016-0012.html - http://www.theregister.co.uk/2016/08/16/vmware_shipped_public_key_with_its_photon_osforcontainers/
CVE ID: CVE-2016-5334 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:00:58.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037326 - http://www.vmware.com/security/advisories/VMSA-2016-0021.html - http://www.securityfocus.com/bid/94482
CVE ID: CVE-2016-5335 State: PUBLISHED Published: 2016-08-31T01:00:00 Last Updated: 2024-08-06T01:00:59.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0013.html - http://www.securitytracker.com/id/1036685 - http://www.securityfocus.com/bid/92608
CVE ID: CVE-2016-5336 State: PUBLISHED Published: 2016-08-31T01:00:00 Last Updated: 2024-08-06T01:00:59.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0013.html - http://www.securitytracker.com/id/1036685 - http://www.securityfocus.com/bid/92607
CVE ID: CVE-2016-5337 State: PUBLISHED Published: 2016-06-14T14:00:00 Last Updated: 2024-08-06T01:00:59.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3047-1 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=844864fbae66935951529408831c2f22367a57b6 - http://www.securityfocus.com/bid/91097 - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-3047-2 - http://ww
urityfocus.com/bid/91097 - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-3047-2 - http://www.openwall.com/lists/oss-security/2016/06/08/13 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01969.html - http://www.openwall.com/lists/oss-security/2016/06/08/3
CVE ID: CVE-2016-5338 State: PUBLISHED Published: 2016-06-14T14:00:00 Last Updated: 2024-08-06T01:00:59.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff589551c8e8e9e95e211b9d8daafb4ed39f1aec - http://www.ubuntu.com/usn/USN-3047-1 - https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01507.html - http:
aec - http://www.ubuntu.com/usn/USN-3047-1 - https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01507.html - http://www.openwall.com/lists/oss-security/2016/06/08/14 - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-3047-2 - http://www.securityfocus.com/bid/91079 - http://www.openwall.com/lists/oss-security/2016/06/07/3 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-5340 State: PUBLISHED Published: 2016-08-07T21:00:00 Last Updated: 2024-08-06T01:01:00.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem string as the dentry name. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/invalid-path-check-ashmem-memory-file-cve-2016-5340 - http://www.securityfocus.com/bid/92374 - http://source.an
rora.org/invalid-path-check-ashmem-memory-file-cve-2016-5340 - http://www.securityfocus.com/bid/92374 - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=06e51489061e5473b4e2035c79dcf7c27a6f75a6 - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-5341 State: PUBLISHED Published: 2016-12-06T11:00:00 Last Updated: 2024-08-06T01:00:59.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service (GPS signal-acquisition delay) via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 (and AndroidID-7225554). Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2016/12/05/cve-2016-5341/ - https://source.android.com/security/bulletin/pixel/2017-12-01 - http://www.se
ersecurity.com/2016/12/05/cve-2016-5341/ - https://source.android.com/security/bulletin/pixel/2017-12-01 - http://www.securityfocus.com/bid/94689 - http://source.android.com/security/bulletin/2016-12-01.html
CVE ID: CVE-2016-5342 State: PUBLISHED Published: 2016-08-30T17:00:00 Last Updated: 2024-08-06T01:00:58.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service or possibly have unspecified other impact by writing to /dev/wcnss_wlan with an unexpected amount of data. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3
ata. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=579e796cb089324c55e0e689a180575ba81b23d9 - http://www.securityfocus.com/bid/92693 - http://source.android.com/security/bulletin/2016-10-01.html - https://www.codeaurora.org/buffer-overflow-vulnerability-wcnsswlanwrite-cve-2016-5342
CVE ID: CVE-2016-5343 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:00:58.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/soc/qcom/qdsp6v2/voice_svc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a write request, as demonstrated by a voice_svc_send_req buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93330 - https://www.codeaurora.org/multiple-me
: - CVE Program Container: References: - http://www.securityfocus.com/bid/93330 - https://www.codeaurora.org/multiple-memory-corruption-issues-write-operation-qdsp6v2-voice-service-driver-cve-2016-5343 - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=6927e2e0af4dcac357be86ba563c9ae12354bb08
CVE ID: CVE-2016-5344 State: PUBLISHED Published: 2016-08-30T17:00:00 Last Updated: 2024-08-06T01:00:58.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7 - https://ww
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7 - https://www.codeaurora.org/integer-overflow-mdss-driver-cve-2016-5344 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/92695
CVE ID: CVE-2016-5345 State: PUBLISHED Published: 2018-01-23T01:00:00 Last Updated: 2024-08-06T01:00:59.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows local users to gain privileges via a crafted application, aka Android internal bug 32639452 and Qualcomm internal bug CR1079713. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-01-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=67118716a2933f6f30a25ea7e3946569a8b191c6 - http://www.securityfocus.com/bid/95273
CVE ID: CVE-2016-5346 State: PUBLISHED Published: 2020-01-08T18:39:45 Last Updated: 2024-08-06T01:00:58.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when processing an accept system call by the user process on AF_MSM_IPC sockets, which could let a local malicious user obtain sensitive information (Android Bug ID A-32551280). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97371 - http://www.securitytracker.com/id/1038201 - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=6298
371 - http://www.securitytracker.com/id/1038201 - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=6298a474322fb2182f795a622b2faa64abfd8474 - https://github.com/ele7enxxh/poc-exp/tree/master/CVE-2016-5346 - https://source.android.com/security/bulletin/2017-04-01.html
CVE ID: CVE-2016-5347 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-17T00:46:31.766Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Information Exposure in Audio Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=f14390f13e62460fc6b05fc0acde0e825374fdb6 - http://www.securityfocus.com/bid/98218 - https://www.codeaurora.org/uninitialized-channel-map-array-
0acde0e825374fdb6 - http://www.securityfocus.com/bid/98218 - https://www.codeaurora.org/uninitialized-channel-map-array-can-leak-data-user-space-qdsp6v2-driver-cve-2016-5347
CVE ID: CVE-2016-5348 State: PUBLISHED Published: 2016-10-10T10:00:00Z Last Updated: 2024-09-17T02:21:28.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service (memory consumption, and device hang or reboot) via a large xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 29555864. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93293 - https://source.android.com/security/bulletin/2018-0
am Container: References: - http://www.securityfocus.com/bid/93293 - https://source.android.com/security/bulletin/2018-04-01 - http://source.android.com/security/bulletin/2016-10-01.html - https://code.google.com/p/android/issues/detail?id=213747 - https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ - https://www.exploit-db.com/exploits/40502/ - https://android.googlesource.com/platform/frameworks/base/+/218b813d5bc2d7d3952ea1861c38b4aa944ac59b
CVE ID: CVE-2016-5349 State: PUBLISHED Published: 2017-04-06T19:00:00 Last Updated: 2024-08-06T01:01:00.079Z Vendors: Qualcomm, Inc. Products: Qualcomm Snapdragon 800, 600, 400, 200 Problem Types: Insufficient Memory Address Information to prevent Arbitrary Memory Access from QSEE Secure Applications Description: The high level operating systems (HLOS) was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment (QSEE) only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications inside Qualcomm Secure Execution Environment (QSEE) receive memory addresses from a
OS client. When secure applications inside Qualcomm Secure Execution Environment (QSEE) receive memory addresses from a high level operating system (HLOS) such as Linux Android, those address have previously been verified as belonging to HLOS memory space rather than QSEE memory space, but they were not verified to be from HLOS user space rather than kernel space. This lack of verification could lead to privilege escalation within the HLOS. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/insufficient-memory-address-information-prevent-arbitrary-memory-access-qsee-secure-applications-cve - https://source.android.com/security/bulletin/2017-04-01 - ht
vent-arbitrary-memory-access-qsee-secure-applications-cve - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97364 - https://www.qualcomm.com/company/product-security/security-advisories - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2016-5350 State: PUBLISHED Published: 2016-08-07T16:00:00 Last Updated: 2024-08-06T01:00:58.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/09/3 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.debian.org/security/2016/dsa-3615 - https://github.com/wireshark/wire
security/bulletinjul2016-3090568.html - http://www.debian.org/security/2016/dsa-3615 - https://github.com/wireshark/wireshark/commit/b4d16b4495b732888e12baf5b8a7e9bf2665e22b - http://www.securityfocus.com/bid/91140 - https://www.wireshark.org/security/wnpa-sec-2016-29.html
CVE ID: CVE-2016-5351 State: PUBLISHED Published: 2016-08-07T16:00:00 Last Updated: 2024-08-06T01:01:00.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11585 - http://www.openwall.com/lists/oss-security/2016/06/09/3 - https://github.com/wireshark/wireshark/commit/9b0b20b8d5f8c9f7839d58ff6c5900f7e19283b4 - http://www.
rity/2016/06/09/3 - https://github.com/wireshark/wireshark/commit/9b0b20b8d5f8c9f7839d58ff6c5900f7e19283b4 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://www.wireshark.org/security/wnpa-sec-2016-30.html - http://www.debian.org/security/2016/dsa-3615 - http://www.securityfocus.com/bid/91140
CVE ID: CVE-2016-5352 State: PUBLISHED Published: 2016-08-07T16:00:00 Last Updated: 2024-08-06T01:00:58.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wireshark/wireshark/commit/b6d838eebf4456192360654092e5587c5207f185 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12175 - http://www.openwall.com/lists/oss-security/2016/06/09/3 - http://www.oracle.com/technetwork/topics/sec
ug.cgi?id=12175 - http://www.openwall.com/lists/oss-security/2016/06/09/3 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.securityfocus.com/bid/91140 - https://www.wireshark.org/security/wnpa-sec-2016-31.html