Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
5.2(4.7.1)EC 15.2(4.7.2)EC 15.2(5.1.1)E 15.2(5.5.63)E 15.2(5.5.64)E 15.4(1)IA1.80 15.5(3)M1.1 15.5(3)M2 15.5(3)S1.4 15.5(3)S2 15.6(0.22)S0.12 15.6(1)T0.1 15.6(1)T1 15.6(1.15)T 15.6(1.17)S0.7 15.6(1.17)SP 15.6(1.22.1a)T0 15.6(2)S 15.6(2)SP 16.1(1.24) 16.1.2 16.2(0.247) 16.3(0.11) 3.8(1)E Denali-16.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94773 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios-xe-x509 - http://www.securitytracker.com/id/1037420
CVE ID: CVE-2016-6479 State: REJECTED Published: 2016-04-21T10:00:00Z Last Updated: 2024-09-16T18:28:49.390Z Description: No description available.
CVE ID: CVE-2016-6480 State: PUBLISHED Published: 2016-08-06T20:00:00 Last Updated: 2024-08-06T01:29:20.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1362466 - http://www.securityfocus.com/archive/1/539074/30/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html - http
s.com/archive/1/539074/30/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html - http://www.securityfocus.com/bid/92214 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00001.html - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://rhn.redhat.com/errata/RHSA-2017-0817.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00049.html - http:
rity-announce/2016-08/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.html
CVE ID: CVE-2016-6483 State: PUBLISHED Published: 2016-09-02T01:00:00 Last Updated: 2024-08-06T01:29:20.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5.2.0 Patch Level 3, 5.2.1 before Patch Level 1, and 5.2.2 before Patch Level 1 allows remote attackers to conduct SSRF attacks via a crafted URL that results in a Redirection HTTP status code. Additional Analyst Notes: - CVE Program Container: References: - http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-anno
otes: - CVE Program Container: References: - http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349551-security-patch-vbulletin-5-2-0-5-2-1-5-2-2 - https://www.exploit-db.com/exploits/40225/ - http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349548-security-patch-vbulletin-3-8-7-3-8-8-3-8-9-3-8-10-beta - http://legalhackers.com/advisories/vBulletin-SSRF-Vulnerability-Exploit.txt - http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4349549-security-patch-vbulletin-4-2-2-4-2-3-4-2-4-beta - http://www.securitytracker.com/id/1036553 - http://www.securityfocus.com/bid/92350
CVE ID: CVE-2016-6484 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:29:20.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/138615/Infoblox-7.0.1-CRLF-Injection-HTTP-Response-Splitting.html - http://www.securitytracker.com/id/1036736 - http://www.securityfocus.com/archive/1/539366/100/0/thread
-Splitting.html - http://www.securitytracker.com/id/1036736 - http://www.securityfocus.com/archive/1/539366/100/0/threaded - http://www.securityfocus.com/bid/92794
CVE ID: CVE-2016-6485 State: PUBLISHED Published: 2017-03-01T20:00:00 Last Updated: 2024-08-06T01:29:20.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magento/magento2/pull/15017 - http://www.openwall.com/lists/oss-security/2016/07/19/3 - http://www.openwall.com/lists/oss-security/2016/07/27/14
CVE ID: CVE-2016-6486 State: PUBLISHED Published: 2016-08-08T00:00:00 Last Updated: 2024-08-06T01:29:20.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-215-02 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-321174.pdf - http://www.zerodayinitiative.com/advisories/ZDI-16-478 - http://www.securityfocus.com/bid/92254
CVE ID: CVE-2016-6489 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T01:29:20.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/29/7 - http://www.ubuntu.com/usn/USN-3193-1 - https://security.gentoo.org/glsa/201706-21 - https://git.lysator.liu.se/nettle/nettle/commit/3fe1d6549765ecfb24f0b80b2ed086fdc818bff3 - https://bugzilla.redhat.com/show_bug.cgi?id=1362016 - https://eprint.iacr.org/2016/596.pdf - http://rhn.
086fdc818bff3 - https://bugzilla.redhat.com/show_bug.cgi?id=1362016 - https://eprint.iacr.org/2016/596.pdf - http://rhn.redhat.com/errata/RHSA-2016-2582.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2016-6490 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:29:20.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/28/4 - http://www.openwall.com/lists/oss-security/2016/07/28/9 - https://security.gentoo.org/glsa/201609-01 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1e7aed70144b4673fc26e73062
- https://security.gentoo.org/glsa/201609-01 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1e7aed70144b4673fc26e73062064b6724795e5f - https://lists.gnu.org/archive/html/qemu-devel/2016-07/msg06246.html
CVE ID: CVE-2016-6491 State: PUBLISHED Published: 2016-12-13T15:00:00 Last Updated: 2024-08-06T01:29:20.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/28/13 - http://www.openwall.com/lists/oss-security/2016/07/28/15 - https://github.com/ImageMagick/ImageMagick/commit/dd84447b63a71fa8c3f47071b09454efc667767b - http://www.
2016/07/28/15 - https://github.com/ImageMagick/ImageMagick/commit/dd84447b63a71fa8c3f47071b09454efc667767b - http://www.securitytracker.com/id/1036501 - http://www.securityfocus.com/bid/92186 - https://github.com/ImageMagick/ImageMagick/blob/6.9.5-4/ChangeLog - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://security.gentoo.org/glsa/201611-21
CVE ID: CVE-2016-6492 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-06T01:29:20.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92207 - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/archive/1/539058/100/0/threaded - http://packetstormsecurity.com/files/138113/MediaTek-Driver-Privilege-Escalation.html
CVE ID: CVE-2016-6493 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-06T01:29:20.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036539 - http://www.securityfocus.com/bid/92316 - http://support.citrix.com/article/CTX215460
CVE ID: CVE-2016-6494 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-06T01:29:20.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1362553 - http://www.openwall.com/lists/oss-security/2016/07/29/8 - https://github.com/mongodb/mongo/commit/035cf2afc04988b22cb67f4ebfd77e9b344cb6e0 - http://www.securityfocus.com/bid/92204 - https://jira.mongodb.org/browse/SERVER-25335 - https://lists.fed
7e9b344cb6e0 - http://www.securityfocus.com/bid/92204 - https://jira.mongodb.org/browse/SERVER-25335 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MCE2ZLFBNOK3TTWSTXZJQGZVP4EEJDL/ - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832908 - http://www.openwall.com/lists/oss-security/2016/07/29/4
CVE ID: CVE-2016-6495 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-06T01:29:20.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20160929-0001
CVE ID: CVE-2016-6496 State: PUBLISHED Published: 2016-12-09T22:00:00 Last Updated: 2024-08-06T01:29:20.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CWD-4790 - http://www.securityfocus.com/archive/1/539655/100/0/threaded - https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE-wp.pdf - https://confluence.atlassi
at.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE-wp.pdf - https://confluence.atlassian.com/crowd/crowd-security-advisory-2016-10-19-856697283.html - http://www.securityfocus.com/bid/93826
CVE ID: CVE-2016-6497 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T01:29:20.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95929 - https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE-wp.pdf - https://mail-archives.apache.org/mod_mbox/directory-users/201610.mbox/%3Cb7d7e909-a8ed-1ab4-c853-4078c1e
To-RCE-wp.pdf - https://mail-archives.apache.org/mod_mbox/directory-users/201610.mbox/%3Cb7d7e909-a8ed-1ab4-c853-4078c1e7624a%40stefan-seelmann.de%3E - http://svn.apache.org/viewvc/directory/sandbox/szoerner/groovyldap/src/main/java/org/apache/directory/groovyldap/LDAP.java?r1=1765362&r2=1765361&pathrev=1765362&view=patch - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
CVE ID: CVE-2016-6498 State: REJECTED Published: 2020-08-17T14:10:14 Last Updated: 2020-08-17T14:10:14 Description: No description available.
CVE ID: CVE-2016-6499 State: REJECTED Published: 2020-08-17T14:10:14 Last Updated: 2020-08-17T14:10:14 Description: No description available.
CVE ID: CVE-2016-6500 State: PUBLISHED Published: 2017-02-03T19:00:00 Last Updated: 2024-08-06T01:29:20.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote attackers to execute arbitrary code via a crafted serialized Java object, aka LDAP entry poisoning. Additional Analyst Notes: - CVE Program Container: References: - https://backstage.forgerock.com/knowledge/kb/article/a96963547
CVE ID: CVE-2016-6501 State: PUBLISHED Published: 2016-12-09T22:00:00 Last Updated: 2024-08-06T01:29:20.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94855 - https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE-wp.pdf - https://www.jfrog.com/confluence/display/RTF/Release+Notes#ReleaseNotes-MainUpdates.7
CVE ID: CVE-2016-6502 State: REJECTED Published: 2020-08-17T14:10:14 Last Updated: 2020-08-17T14:10:14 Description: No description available.
CVE ID: CVE-2016-6503 State: PUBLISHED Published: 2016-08-06T23:00:00 Last Updated: 2024-08-06T01:29:20.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2016/07/28/3 - http://www.securityfocus.com/bid/92162 - http://www.wireshark.org/security/wnpa-sec-2016-39.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12495 - https://cod
w.wireshark.org/security/wnpa-sec-2016-39.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12495 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=581a17af40b84ef0c9e7f41ed0795af345b61ce1 - http://www.securitytracker.com/id/1036480 - https://www.exploit-db.com/exploits/40196/
CVE ID: CVE-2016-6504 State: PUBLISHED Published: 2016-08-06T23:00:00 Last Updated: 2024-08-06T01:29:20.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2016/07/28/3 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12576 - http://www.debian.org/security/2016/dsa-3648 - http://www.securityfocus.com/bid/92
.org/bugzilla/show_bug.cgi?id=12576 - http://www.debian.org/security/2016/dsa-3648 - http://www.securityfocus.com/bid/92164 - https://www.exploit-db.com/exploits/40194/ - http://www.wireshark.org/security/wnpa-sec-2016-40.html - http://www.securitytracker.com/id/1036480 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9eacbb4d48df647648127b9258f9e5aeeb0c7d99
CVE ID: CVE-2016-6505 State: PUBLISHED Published: 2016-08-06T23:00:00 Last Updated: 2024-08-06T01:29:20.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2016/07/28/3 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12577 - http://www.debian.org/security/2016/dsa-3648 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3B
- http://www.debian.org/security/2016/dsa-3648 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=94e97e45cf614c7bb8fe90c23df52910246b2c95 - http://www.wireshark.org/security/wnpa-sec-2016-41.html - http://www.securityfocus.com/bid/92163 - https://www.exploit-db.com/exploits/40197/ - http://www.securitytracker.com/id/1036480
CVE ID: CVE-2016-6506 State: PUBLISHED Published: 2016-08-06T23:00:00 Last Updated: 2024-08-06T01:29:20.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2016/07/28/3 - http://www.debian.org/security/2016/dsa-3648 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12594 - http://www.wireshark.org/security/wnpa-sec-2016-42.html - http://www.securitytracker.com/id/1036480 - https:/
id=12594 - http://www.wireshark.org/security/wnpa-sec-2016-42.html - http://www.securitytracker.com/id/1036480 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a9d5256890c9189c7461bfce6ed6edce5d861499
CVE ID: CVE-2016-6507 State: PUBLISHED Published: 2016-08-06T23:00:00 Last Updated: 2024-08-06T01:29:20.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2016/07/28/3 - http://www.debian.org/security/2016/dsa-3648 - http://www.wireshark.org/security/wnpa-sec-2016-43.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12624 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3B
gs.wireshark.org/bugzilla/show_bug.cgi?id=12624 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5a10743258bd016c07ebf6479137fda3d172a0f - http://www.securitytracker.com/id/1036480
CVE ID: CVE-2016-6508 State: PUBLISHED Published: 2016-08-06T23:00:00 Last Updated: 2024-08-06T01:29:20.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (large loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2016/07/28/3 - http://www.debian.org/security/2016/dsa-3648 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6cf9616df68a4db7e436bb77392586ff9ad84feb - http://www.wir
ode.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6cf9616df68a4db7e436bb77392586ff9ad84feb - http://www.wireshark.org/security/wnpa-sec-2016-44.html - http://www.securitytracker.com/id/1036480 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12660
CVE ID: CVE-2016-6509 State: PUBLISHED Published: 2016-08-06T23:00:00 Last Updated: 2024-08-06T01:29:20.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2016/07/28/3 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12662 - http://www.debian.org/security/2016/dsa-3648 - http://www.wireshark.org/security/wnpa-sec-2016-45.html - http://www.se
- http://www.debian.org/security/2016/dsa-3648 - http://www.wireshark.org/security/wnpa-sec-2016-45.html - http://www.securitytracker.com/id/1036480 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5a469ddc893f7c1912d0e15cc73bd3011e6cc2fb
CVE ID: CVE-2016-6510 State: PUBLISHED Published: 2016-08-06T23:00:00 Last Updated: 2024-08-06T01:29:20.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2016/07/28/3 - http://www.debian.org/security/2016/dsa-3648 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12664 - http://www.wireshark.org/security/wnpa-sec-2016-46.ht
3648 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12664 - http://www.wireshark.org/security/wnpa-sec-2016-46.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47a5fa850b388fcf4ea762073806f01b459820fe - http://www.securitytracker.com/id/1036480
CVE ID: CVE-2016-6511 State: PUBLISHED Published: 2016-08-06T23:00:00 Last Updated: 2024-08-06T01:29:20.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2016/07/28/3 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=56706427f53cc64793870bf072c2c06248ae88f3 - http://www.debian.org/security/2016/dsa-3648 - http://www.securitytracker.com/id/1036480 - https://bugs.wireshark.org/bugz
tp://www.debian.org/security/2016/dsa-3648 - http://www.securitytracker.com/id/1036480 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12659 - http://www.wireshark.org/security/wnpa-sec-2016-47.html