Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://www.securitytracker.com/id/1038262 - https://security.gentoo.org/glsa/201706-12 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=fa31f69b407436d0946f84baa0acdcc50962bf7a
CVE ID: CVE-2017-7702 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:28.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97633 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2f322f66cbcca2fefdaa630494f9d6c97eb659b7 - http://www.securitytracker.com/id/1038262 - https://security.gentoo.o
mit%3Bh=2f322f66cbcca2fefdaa630494f9d6c97eb659b7 - http://www.securitytracker.com/id/1038262 - https://security.gentoo.org/glsa/201706-12 - https://www.wireshark.org/security/wnpa-sec-2017-13.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477
CVE ID: CVE-2017-7703 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:27.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=671e32820ab29d41d712cc8a472eab9b672684d9 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securitytracker.com/id/1038262 - https://
ttps://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securitytracker.com/id/1038262 - https://security.gentoo.org/glsa/201706-12 - https://www.wireshark.org/security/wnpa-sec-2017-12.html - http://www.securityfocus.com/bid/97636 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13466
CVE ID: CVE-2017-7704 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:27.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2017-17.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6032b0fe5fc1176ab7
zilla/show_bug.cgi?id=13453 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6032b0fe5fc1176ab77e03e20765f95fbd21b19e - http://www.securitytracker.com/id/1038262 - http://www.securityfocus.com/bid/97634 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=da53a90b6895e47e03c5de05edf84bd99d535fd8 - https://security.gentoo.org/glsa/201706-12
CVE ID: CVE-2017-7705 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:27.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=08d392bbecc8fb666bf979e70a34536007b83ea2 - http://www
://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=08d392bbecc8fb666bf979e70a34536007b83ea2 - http://www.securityfocus.com/bid/97630 - http://www.securitytracker.com/id/1038262 - https://security.gentoo.org/glsa/201706-12 - https://www.wireshark.org/security/wnpa-sec-2017-15.html
CVE ID: CVE-2017-7716 State: PUBLISHED Published: 2017-04-12T15:00:00Z Last Updated: 2024-09-17T03:07:08.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/7260
CVE ID: CVE-2017-7717 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-05T16:12:27.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2356504. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100168 - http://www.securityfocus.com/bid/95364 - https://erpscan.io/advisories/erpscan-17-003-sap-netweaver-7-4-getuseruddielements-sql-injection/
CVE ID: CVE-2017-7718 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-05T16:12:28.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97957 - https://access.redhat.com/errata/RHSA-2017:0983 - https://access.redhat.com/errata/RHSA-2017:0982 - https://bugzilla.redhat.com/show_bug.cgi?
.com/errata/RHSA-2017:0983 - https://access.redhat.com/errata/RHSA-2017:0982 - https://bugzilla.redhat.com/show_bug.cgi?id=1443441 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://access.redhat.com/errata/RHSA-2017:1430 - https://security.gentoo.org/glsa/201706-03 - https://access.redhat.com/errata/RHSA-2017:1206 - https://access.redhat.com/errata/RHSA-2017:1431 - https://access.redhat.com/errata/RHSA-2017:0984 - https://access.redhat.com/errata/RHSA-2017:0988 - https://access.redhat.com/errata/RHSA-2017:1441 - http://www.openwall.com/lists/oss-security/2017/04/19/4 - https://access.redhat.com/errata/RHSA-2017:0981 - http://git.qemu-project.org/?p=qemu.git%3Ba=c
-security/2017/04/19/4 - https://access.redhat.com/errata/RHSA-2017:0981 - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=215902d7b6fb50c6fc216fc74f770858278ed904 - https://access.redhat.com/errata/RHSA-2017:0980 - https://access.redhat.com/errata/RHSA-2017:1205
CVE ID: CVE-2017-7719 State: PUBLISHED Published: 2017-04-12T15:00:00 Last Updated: 2024-08-05T16:12:28.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by parameter to calendar_functions.php or widget_Theme_functions.php, related to front_end/frontend_functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97656 - http://lists.openwall.net/full-disclosure/2017/04/09/1
CVE ID: CVE-2017-7720 State: PUBLISHED Published: 2017-04-26T14:00:00 Last Updated: 2024-08-05T16:12:28.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PrivateTunnel 2.7 and 2.8 allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long password. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41916/
CVE ID: CVE-2017-7721 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:12:27.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix (.FPX) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.irfanview.com/plugins.htm - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-7721
CVE ID: CVE-2017-7722 State: PUBLISHED Published: 2017-04-12T16:00:00Z Last Updated: 2024-09-17T00:56:33.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell. Additional Analyst Notes: - CVE Program Container: References: - https://thwack.solarwinds.com/thread/111223 - https://pentest.blog/unexpected-journey-4-escaping-from-restricted-shell-and-gaining-root-access-to-so
m/thread/111223 - https://pentest.blog/unexpected-journey-4-escaping-from-restricted-shell-and-gaining-root-access-to-solarwinds-log-event-manager-siem-product/
CVE ID: CVE-2017-7723 State: PUBLISHED Published: 2017-04-24T18:00:00 Last Updated: 2024-08-05T16:12:28.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/easy-wp-smtp/#developers
CVE ID: CVE-2017-7725 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-05T16:12:28.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain name in the Host header; this is stored and allows for arbitrary domains to be set for certain links displayed to subsequent visitors, potentially an XSS vector. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41885/ - htt
ector. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41885/ - http://hyp3rlinx.altervista.org/advisories/CONCRETE5-v8.1.0-HOST-HEADER-INJECTION.txt - https://packetstormsecurity.com/files/142145/concrete5-8.1.0-Host-Header-Injection.html - http://www.securityfocus.com/bid/97649 - https://hackerone.com/reports/148300
CVE ID: CVE-2017-7726 State: PUBLISHED Published: 2017-07-11T17:00:00 Last Updated: 2024-08-05T16:12:28.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/
CVE ID: CVE-2017-7727 State: REJECTED Published: 2017-07-11T17:00:00 Last Updated: 2017-07-11T16:57:01 Description: No description available.
CVE ID: CVE-2017-7728 State: PUBLISHED Published: 2017-07-11T17:00:00 Last Updated: 2024-08-05T16:12:28.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography. Additional Analyst Notes: - CVE Program Container: References: - http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/
CVE ID: CVE-2017-7729 State: PUBLISHED Published: 2017-07-11T17:00:00 Last Updated: 2024-08-05T16:12:28.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. Additional Analyst Notes: - CVE Program Container: References: - http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/
CVE ID: CVE-2017-7730 State: PUBLISHED Published: 2017-07-11T17:00:00 Last Updated: 2024-08-05T16:12:28.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding. Additional Analyst Notes: - CVE Program Container: References: - http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/
CVE ID: CVE-2017-7731 State: PUBLISHED Published: 2017-05-26T22:00:00 Last Updated: 2024-10-25T14:34:19.849Z Vendors: Fortinet, Inc. Products: Fortinet FortiPortal Problem Types: Information disclosure Description: A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-17-114
CVE ID: CVE-2017-7732 State: PUBLISHED Published: 2017-10-26T13:00:00 Last Updated: 2024-10-25T14:11:20.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1039584 - https://fortiguard.com/psirt/FG-IR-17-099 - http://www.securityfocus.com/bid/101278
CVE ID: CVE-2017-7733 State: PUBLISHED Published: 2017-10-27T13:00:00 Last Updated: 2024-10-25T14:10:56.366Z Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Cross-Site Scripting (XSS) Description: A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute arbitrary javascript code via webUI "Login Disclaimer" redir parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1039677 - https://fortiguard.com/psirt/FG-IR-17-113 - http://www.securityfocus.com/bid/101563
CVE ID: CVE-2017-7734 State: PUBLISHED Published: 2017-09-12T02:00:00Z Last Updated: 2024-10-25T14:12:09.829Z Vendors: Fortinet, Inc. Products: Fortinet FortiOS Problem Types: Execute unauthorized code or commands Description: A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1038705 - https://fortiguard.com/advisory/FG-IR-17-127 - http://www.securityfocus.com/bid/99098
CVE ID: CVE-2017-7735 State: PUBLISHED Published: 2017-09-12T02:00:00Z Last Updated: 2024-10-25T14:11:52.628Z Vendors: Fortinet, Inc. Products: Fortinet FortiOS Problem Types: Execute unauthorized code or commands Description: A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1038705 - https://fortiguard.com/advisory/FG-IR-17-127 - http://www.securityfocus.com/bid/99098
CVE ID: CVE-2017-7736 State: PUBLISHED Published: 2017-11-22T17:00:00Z Last Updated: 2024-10-25T14:10:30.990Z Vendors: Fortinet, Inc. Products: Fortinet FortiWeb Problem Types: Cross-site Scripting (XSS) Description: A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-17-131 - http://www.securityfocus.com/bid/101916
CVE ID: CVE-2017-7737 State: PUBLISHED Published: 2017-08-10T21:00:00Z Last Updated: 2024-10-25T14:13:01.451Z Vendors: Fortinet, Inc. Products: Fortinet FortiWeb Problem Types: Information Disclosure Description: An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in webui via the HTML source code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-17-162 - http://www.securityfocus.com/bid/100205
CVE ID: CVE-2017-7738 State: PUBLISHED Published: 2017-12-13T22:00:00Z Last Updated: 2024-10-25T14:33:09.500Z Vendors: Fortinet, Inc. Products: FortiOS Problem Types: Information Disclosure Description: An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/102151 - https://fortiguard.com/advisory/FG-IR-17-172
CVE ID: CVE-2017-7739 State: PUBLISHED Published: 2017-11-13T14:00:00Z Last Updated: 2024-10-25T14:10:42.993Z Vendors: Fortinet, Inc. Products: FortiOS Problem Types: Cross-site Scripting (XSS) Description: A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/101679 - http://www.securitytracker.com/id/103974
CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/101679 - http://www.securitytracker.com/id/1039741 - https://fortiguard.com/advisory/FG-IR-17-168
CVE ID: CVE-2017-7740 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:10.464Z Description: No description available.
CVE ID: CVE-2017-7741 State: PUBLISHED Published: 2017-04-12T18:00:00 Last Updated: 2024-08-05T16:12:28.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0 - https://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/ - https://security.gento
s://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/ - https://security.gentoo.org/glsa/201707-04
CVE ID: CVE-2017-7742 State: PUBLISHED Published: 2017-04-12T18:00:00 Last Updated: 2024-08-05T16:12:28.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0 - https://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/ - https://security.gentoo
://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/ - https://security.gentoo.org/glsa/201707-04
CVE ID: CVE-2017-7745 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:28.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0 - https://www.wireshark.org/security/wnpa-
itweb?p=wireshark.git%3Ba=commit%3Bh=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0 - https://www.wireshark.org/security/wnpa-sec-2017-20.html - http://www.securityfocus.com/bid/97627
CVE ID: CVE-2017-7746 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:28.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=58e69cc769dea24b721abd8a29f9eedc11024b7e - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576 - https://lists.debian.org/debian-lts-an
d8a29f9eedc11024b7e - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securityfocus.com/bid/97635 - https://www.wireshark.org/security/wnpa-sec-2017-19.html
CVE ID: CVE-2017-7747 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:28.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97638 - https://www.wireshark.org/security/wnpa-sec-2017-18.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id
https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5cfd52d6629cf8a7ab67c6bacd3431a964f43584
CVE ID: CVE-2017-7748 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:28.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f55cbcde2c8f74b652add4450b0592082eb6acff - https://www.wireshark.org/security/wnpa-sec-2017-21.html - http://www.securityfocus.com/bid/97628 - https://bugs.wire
- https://www.wireshark.org/security/wnpa-sec-2017-21.html - http://www.securityfocus.com/bid/97628 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581