Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tion from stack memory or cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160130-01-smartphone-en
CVE ID: CVE-2015-8683 State: PUBLISHED Published: 2016-04-13T17:00:00 Last Updated: 2024-08-06T08:29:20.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035508 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.openwall.com/lists/oss-s
ttp://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.openwall.com/lists/oss-security/2015/12/26/1 - http://www.ubuntu.com/usn/USN-2939-1 - https://security.gentoo.org/glsa/201701-16 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/79718 - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://www.openwall.com/lists/oss-security/2015/12/25/1 - http://www.debian.org/security/2016/dsa-3467
CVE ID: CVE-2015-8684 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T08:29:20.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly have other unspecified impact as demonstrated by uploading a file with an .html extension, then accessing it via the elFinder functionality. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/136762/Exponent-CMS-2.3.5-File-Upload-Cross-Site-Scripting.html - https://exponentcms.lighthouseapp.com/p
rity.com/files/136762/Exponent-CMS-2.3.5-File-Upload-Cross-Site-Scripting.html - https://exponentcms.lighthouseapp.com/projects/61783/tickets/1323-exponent-cms-235-file-upload-cross-site-scripting-vulnerability
CVE ID: CVE-2015-8685 State: PUBLISHED Published: 2016-01-15T19:00:00 Last Updated: 2024-08-06T08:29:20.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) external calendar url or (2) the bank name field in the "import external calendar" page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/issues/4291 - http://packetstormsecurity.com/files/135256/dolibarr-HTML-Injection.html - https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8
/dolibarr-HTML-Injection.html - https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8 - http://seclists.org/fulldisclosure/2016/Jan/40
CVE ID: CVE-2015-8687 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T08:29:20.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Alcatel-Lucent Motive Home Device Manager (HDM) before 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceTypeID parameter to DeviceType/getDeviceType.do; the (2) policyActionClass or (3) policyActionName parameter to PolicyAction/findPolicyActions.do; the deviceID parameter to (4) SingleDeviceMgmt/getDevice.do or (5) device/editDevice.do; the operation parameter to (6) ajax.do or (7) xmlHttp.do; or the (8) policyA
t/getDevice.do or (5) device/editDevice.do; the operation parameter to (6) ajax.do or (7) xmlHttp.do; or the (8) policyAction, (9) policyClass, or (10) policyName parameter to policy/findPolicies.do. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jan/0
CVE ID: CVE-2015-8688 State: PUBLISHED Published: 2016-01-15T19:00:00 Last Updated: 2024-08-06T08:29:20.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-01/msg00027.html - http://www.debian.org/security/2016/dsa-3492 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175503.html - https://hg.gajim.org/gajim/file/gajim-0.16.5/ChangeLog - http://gultsch.de/gajim_roster_push_and_message_interception.html - http://lists.fedor
jim/file/gajim-0.16.5/ChangeLog - http://gultsch.de/gajim_roster_push_and_message_interception.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175526.html
CVE ID: CVE-2015-8697 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T08:29:20.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: stalin 0.11-5 allows local users to write to arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808730 - https://security-tracker.debian.org/tracker/CVE-2015-8697/ - http://www.securityfocus.com/bid/79713/references - https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8697.html - http://cve.killedkenny.io/cve/CVE-2015-8697 - http://www.openwall.com/lists/oss-security/2015/12/27/2
CVE ID: CVE-2015-8698 State: PUBLISHED Published: 2016-06-29T01:00:00 Last Updated: 2024-08-06T08:29:20.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036193 - http://www.securityfocus.com/bid/91497 -
VE Program Container: References: - http://www.securitytracker.com/id/1036193 - http://www.securityfocus.com/bid/91497 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160627-01-security-notice-for-release-automation.aspx
CVE ID: CVE-2015-8699 State: PUBLISHED Published: 2016-06-29T01:00:00 Last Updated: 2024-08-06T08:29:21.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036193 - http://www.securityfocus.com/bid/91497 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading
p://www.securityfocus.com/bid/91497 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160627-01-security-notice-for-release-automation.aspx
CVE ID: CVE-2015-8701 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T08:29:20.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off-by-one error. It happens while processing transmit (tx) descriptors in 'tx_consume' routine, if a descriptor was to have more than allowed (ROCKER_TX_FRAGS_MAX=16) fragments. A privileged user inside guest could use this flaw to cause memory leakage on the host or crash the QEMU process instance resulting in DoS issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/1
ssue. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/28/6 - https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg04629.html - http://www.securityfocus.com/bid/79706 - http://www.openwall.com/lists/oss-security/2015/12/29/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1286971 - https://security.gentoo.org/glsa/201602-01
CVE ID: CVE-2015-8702 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-06T08:29:20.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\032" (whitespace) character in a hostname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inspircd/inspircd/issues/1033 - https://security.gentoo.org/glsa/201512-13 - http://www.inspircd.org/2015/04/16/v2019-released.html - http://www.debian.org/security/2016/dsa-3527 - https://github.com/inspirc
.inspircd.org/2015/04/16/v2019-released.html - http://www.debian.org/security/2016/dsa-3527 - https://github.com/inspircd/inspircd/commit/6058483d9fbc1b904d5ae7cfea47bfcde5c5b559
CVE ID: CVE-2015-8703 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T08:29:21.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77421 - https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA - https://www.kb.cert.org/vuls/id/391604
CVE ID: CVE-2015-8704 State: PUBLISHED Published: 2016-01-20T15:00:00 Last Updated: 2024-08-06T08:29:20.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://marc.info/?l=bugtraq&m=145680832702035&w=2 - http://www.ubuntu.com/usn/USN-2874-1 - http://rhn.redhat.com/errata/RHSA-2016-0073.html - https://
145680832702035&w=2 - http://www.ubuntu.com/usn/USN-2874-1 - http://rhn.redhat.com/errata/RHSA-2016-0073.html - https://kb.isc.org/article/AA-01335 - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:08.bind.asc - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html - https://kb.isc.org/article/AA-01438 - http://www.debian.org/security/2016/dsa-3449 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.html - http://rhn.redhat.com/errata/RHSA-2016-0074.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00025.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.fedoraprojec
5.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.html - https://security.gentoo.org/glsa/201610-07 - http://www.securitytracker.com/id/1034739 - https://kb.isc.org/article/AA-01380 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.html - http://marc.info/?l=bugtraq&m=145680832702035&w=2 - http://lists.fedorapr
suse-security-announce/2016-01/msg00023.html - http://marc.info/?l=bugtraq&m=145680832702035&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securityfocus.com/bid/81329 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.html
CVE ID: CVE-2015-8705 State: PUBLISHED Published: 2016-01-20T15:00:00 Last Updated: 2024-08-06T08:29:21.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-01336 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html - http://www.securitytracker.com/id/1034740 - http://www.security
rg/pipermail/package-announce/2016-January/175977.html - http://www.securitytracker.com/id/1034740 - http://www.securityfocus.com/bid/81314 - https://security.gentoo.org/glsa/201610-07 - https://kb.isc.org/article/AA-01380 - http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html
CVE ID: CVE-2015-8707 State: PUBLISHED Published: 2017-09-25T19:00:00 Last Updated: 2024-08-06T08:29:21.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, which allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/supee-6788
CVE ID: CVE-2015-8708 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T08:29:21.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201606-11 - http://www.openwall.com/lists/oss-security/2015/12/31/1
CVE ID: CVE-2015-8709 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-06T08:29:20.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2016-
ensuse.org/opensuse-security-announce/2016-04/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html - https://lkml.org/lkml/2015/12/25/71 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html - http://marc.info/?l=linux-kernel&m=145204641422813&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html - http://www.openwall.com/lists/oss-security/2015/12/31/5 - http://www.openwall.com
urity-announce/2016-04/msg00019.html - http://www.openwall.com/lists/oss-security/2015/12/31/5 - http://www.openwall.com/lists/oss-security/2015/12/17/12 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html - http://marc.info/?l=linux-kernel&m=145204362722256&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html - http://lists.ope
ce/2016-04/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html - http://www.securityfocus.com/bid/79899 - http://www.securitytracker.com/id/1034899 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - https://bugzilla.redhat.com/show_bug.cgi?id=1295287 - http://www.debian.org/security/2016/dsa-3434 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html
CVE ID: CVE-2015-8710 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T08:29:20.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/57125#activity-384861 - https://bugzilla.gnome.org/show_bug.cgi?id=746048 - http://www.debian.org/security/2015/dsa-3430 - http://www.openwall.com/lists/oss-security/2015/09/
w_bug.cgi?id=746048 - http://www.debian.org/security/2015/dsa-3430 - http://www.openwall.com/lists/oss-security/2015/09/13/1 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - https://git.gnome.org/browse/libxml2/commit/?id=e724879d964d774df9b7969fc846605aa1bac54c - http://www.openwall.com/lists/oss-security/2015/04/19/4 - http://www.securityfocus.com/bid/79811 - http://www.openwall.com/lists/oss-security/2015/12/31/7
CVE ID: CVE-2015-8711 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:20.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-31.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5b4ada17723ed8af7e85cb48d537437ed614e417 - http://www.debian.
wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5b4ada17723ed8af7e85cb48d537437ed614e417 - http://www.debian.org/security/2016/dsa-3505 - http://www.securityfocus.com/bid/79814 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5bf565690ad9f0771196d8fa237aa37fae3bb7cc - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=23379ae3624df82c170f48e5bb3250a97ec61c13 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11602 - http://www.securitytracker.com/id/1034551 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?i
a/show_bug.cgi?id=11602 - http://www.securitytracker.com/id/1034551 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11835 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11841
CVE ID: CVE-2015-8712 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_hsdsch_channel_info function in epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-32.html - http://www.debian.org/security/2016/dsa-3505 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2ae329a47b7f0ac
ian.org/security/2016/dsa-3505 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2ae329a47b7f0ac94089c23e79c6b8bc18ba80ea - http://www.securityfocus.com/bid/79816 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11602 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8713 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11606 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=67b6d4f7e6f2117b40957fd51518aa2a3e659002 - http://ww
s://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=67b6d4f7e6f2117b40957fd51518aa2a3e659002 - http://www.wireshark.org/security/wnpa-sec-2015-32.html - http://www.debian.org/security/2016/dsa-3505 - http://www.securityfocus.com/bid/79816 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8714 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_dcom_OBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3505 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d34267d0503a67235bf259fd2f2f2d2bb8b18cf5 - https://bugs.wireshark.org/bugz
/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d34267d0503a67235bf259fd2f2f2d2bb8b18cf5 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11610 - http://www.securityfocus.com/bid/79816 - http://www.wireshark.org/security/wnpa-sec-2015-33.html - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551