Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6168 State: PUBLISHED Published: 2015-12-09T11:00:00 Last Updated: 2024-08-06T07:15:13.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6153. Additional Analyst Notes: - CVE Program Container: References: - http://blog.skylined.nl/20161201001.html - https://www.exploit-db.com/exploits/40878/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-125 - http://www.securitytracker.com/id/1034316 - http://www.ze
t.com/en-us/security-updates/securitybulletins/2015/ms15-125 - http://www.securitytracker.com/id/1034316 - http://www.zerodayinitiative.com/advisories/ZDI-15-583 - http://seclists.org/fulldisclosure/2016/Dec/4
CVE ID: CVE-2015-6169 State: PUBLISHED Published: 2015-12-09T11:00:00 Last Updated: 2024-08-06T07:15:12.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge misparses HTTP responses, which allows remote attackers to redirect users to arbitrary web sites via unspecified vectors, aka "Microsoft Edge Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-125 - http://www.securitytracker.com/id/1034316
CVE ID: CVE-2015-6170 State: PUBLISHED Published: 2015-12-09T11:00:00 Last Updated: 2024-08-06T07:15:13.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge allows remote attackers to gain privileges via a crafted web site, aka "Microsoft Browser Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-125 - http://www.securitytracker.com/id/1034316
CVE ID: CVE-2015-6171 State: PUBLISHED Published: 2015-12-09T11:00:00 Last Updated: 2024-08-06T07:15:13.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-6173 and CVE-2015-6174. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins
nalyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-135 - http://www.securitytracker.com/id/1034334
CVE ID: CVE-2015-6172 State: PUBLISHED Published: 2015-12-09T11:00:00 Last Updated: 2024-08-06T07:15:13.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted email message processed by Outlook, aka "Microsoft Office RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-131 - http://www.securitytracker.com/id/1034325
CVE ID: CVE-2015-6173 State: PUBLISHED Published: 2015-12-09T11:00:00 Last Updated: 2024-08-06T07:15:13.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-6171 and CVE-2015-6174. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins
CVE ID: CVE-2015-6174 State: PUBLISHED Published: 2015-12-09T11:00:00 Last Updated: 2024-08-06T07:15:12.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-6171 and CVE-2015-6173. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins
CVE ID: CVE-2015-6175 State: PUBLISHED Published: 2015-12-09T11:00:00.000Z Last Updated: 2025-10-21T23:55:56.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-135 - http://www.securitytracker.com/id/1034334
CVE ID: CVE-2015-6176 State: PUBLISHED Published: 2015-12-09T11:00:00 Last Updated: 2024-08-06T07:15:13.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-125 - http://www.securitytracker.com/id/1034316
CVE ID: CVE-2015-6177 State: PUBLISHED Published: 2015-12-09T11:00:00 Last Updated: 2024-08-06T07:15:13.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-131 - http://www.securitytracker.com/id/1034324
CVE ID: CVE-2015-6178 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6179 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6180 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6181 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6182 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6183 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6184 State: PUBLISHED Published: 2016-03-09T23:00:00 Last Updated: 2024-08-06T07:15:13.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CAttrArray object implementation in Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and memory corruption) via a malformed Cascading Style Sheets (CSS) token sequence in conjunction with modifications to HTML elements, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6048 and CVE-2015-6049. Additional Analyst Notes: - CVE Program Container: References: - https://www.verisign.com/en_US/secu
and CVE-2015-6049. Additional Analyst Notes: - CVE Program Container: References: - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1218 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-106
CVE ID: CVE-2015-6185 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6186 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6187 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6188 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6189 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6190 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6191 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6192 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6193 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6194 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6195 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6196 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6197 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6198 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6199 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6200 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6201 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6202 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6203 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6204 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6205 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6206 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6207 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6208 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6209 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6210 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6211 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6212 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6213 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6214 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6215 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6216 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6217 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6218 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6219 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6220 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6221 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6222 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6223 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6224 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6225 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6226 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6227 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6228 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6229 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6230 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6231 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6232 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6233 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6234 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6235 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6236 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6237 State: PUBLISHED Published: 2017-12-27T19:00:00 Last Updated: 2024-08-06T07:15:13.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC service in Tripwire (formerly nCircle) IP360 VnE Manager 7.2.2 before 7.2.6 allows remote attackers to bypass authentication and (1) enumerate users, (2) reset passwords, or (3) manipulate IP filter restrictions via crafted "privileged commands." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536609/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/20
CVE ID: CVE-2015-6238 State: PUBLISHED Published: 2015-09-21T19:00:00 Last Updated: 2024-08-06T07:15:13.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) ga_adsense, (2) ga_admin_disable_DimentionIndex, (3) ga_downloads_prefix, (4) ga_downloads, or (5) ga_outbound_prefix parameter in the google-analyticator page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8159 - https://wordpress.org/plugins/google-analyticator/c
Container: References: - https://wpvulndb.com/vulnerabilities/8159 - https://wordpress.org/plugins/google-analyticator/changelog/ - https://www.netsparker.com/cve-2015-6238-multiple-xss-vulnerabilities-in-google-analyticator/
CVE ID: CVE-2015-6240 State: PUBLISHED Published: 2017-06-07T20:00:00 Last Updated: 2024-08-06T07:15:13.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/commit/ca2f2c4ebd7b5e097eab0a710f79c1f63badf95b - http://www.openwall.com/lists/oss-security/2015/08/17/10 - https://bugzilla.redhat.com/show_bug.cgi?id=1243468 - https://github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647 - https://lists.debian.org/debian-lts-ann
s://github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647 - https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html
CVE ID: CVE-2015-6241 State: PUBLISHED Published: 2015-08-24T23:00:00 Last Updated: 2024-08-06T07:15:13.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proto_tree_add_bytes_item function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - http://www.wire
ct.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - http://www.wireshark.org/security/wnpa-sec-2015-21.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6126a6455058696dd0ac2073032bdfe066a6ae38 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11309 - http://www.debian.org/security/2015/dsa-3367 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-6242 State: PUBLISHED Published: 2015-08-24T23:00:00 Last Updated: 2024-08-06T07:15:13.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-anno
. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - http://www.wireshark.org/security/wnpa-sec-2015-22.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eaf1aad31e7c0a4908c20a42ae118c4dc8d474b6 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html - http://www.debian.org/security/2015/dsa-3367 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11373 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511
suse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-6243 State: PUBLISHED Published: 2015-08-24T23:00:00 Last Updated: 2024-08-06T07:15:13.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-23.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/1688
reshark.org/security/wnpa-sec-2015-23.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eb1ccbdccde89701f255f921d88992878057477d - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html - http://www.securityfocus.com/bid/76384 - http://www.debian.org/security/2015/dsa-3367 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11381 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/t
zilla/show_bug.cgi?id=11381 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-6244 State: PUBLISHED Published: 2015-08-24T23:00:00 Last Updated: 2024-08-06T07:15:13.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-24.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.co
tml - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html - http://www.securitytracker.com/id/1033272 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=31571144be5f03f054a9c7e195b38c2f5792fe54 - http://www.securityfocus.com/bid/76383 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=43c2e5769a17f0945fdcdabe35204a13ca9bbc85 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11389 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=
ttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11389 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=655b0dc623e29da212be3e205314624fe3182562 - http://www.debian.org/security/2015/dsa-3367 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html