Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6432 State: PUBLISHED Published: 2017-03-09T17:00:00 Last Updated: 2024-08-05T15:25:49.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, is an unencrypted, binary protocol. Performing a Man-in-the-Middle attack allows both sniffing and injections of packets, which allows creation of fully privileged new users, in addition to capture of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/null_ku7/status/839814344351240193 - https://nullku7.github.io/stuff/exploi
Container: References: - https://twitter.com/null_ku7/status/839814344351240193 - https://nullku7.github.io/stuff/exploit/dahua/2017/03/09/dahua-nvr-authbypass.html
CVE ID: CVE-2017-6435 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:49.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libimobiledevice/libplist/issues/93 - https://github.com/libimobiledevice/libplist/commit/fbd8494d5e4e46bf2e90cb6116903e404374fb56 - http://www.securityfocus.com/bid/97586 - https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html
CVE ID: CVE-2017-6436 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:49.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libimobiledevice/libplist/issues/94 - https://github.com/libimobiledevice/libplist/commit/32ee5213fe64f1e10ec76c1ee861ee6f233120dd - http://www.securityfocus.com/bid/97290 - https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html
CVE ID: CVE-2017-6437 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:49.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libimobiledevice/libplist/issues/100 - http://www.securityfocus.com/bid/97291
CVE ID: CVE-2017-6438 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:49.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97281 - https://github.com/libimobiledevice/libplist/issues/98
CVE ID: CVE-2017-6439 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:49.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97278 - https://github.com/libimobiledevice/libplist/commit/32ee5213fe64f1e10ec76c1ee861ee6f233120dd - https://github.com/libimobiledevice/libplist/issues/95 - https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html
CVE ID: CVE-2017-6440 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:49.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libimobiledevice/libplist/issues/99 - http://www.securityfocus.com/bid/97583
CVE ID: CVE-2017-6441 State: PUBLISHED Published: 2017-04-03T05:44:00 Last Updated: 2024-08-05T15:25:49.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of "declare(ticks=" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating "Please do not request CVEs for ordinary bugs. CVEs are relevant for security issues only. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=74146 - https://github.com/php/php-src/pull/2396
CVE ID: CVE-2017-6443 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:33:19.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EPSON TMNet WebConfig 1.00 allows remote attackers to inject arbitrary web script or HTML via the W_AD1 parameter to Forms/oadmin_1. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Mar/5 - https://www.exploit-db.com/exploits/41502/ - http://www.securityfocus.com/bid/96556
CVE ID: CVE-2017-6444 State: PUBLISHED Published: 2017-03-12T04:57:00 Last Updated: 2024-08-05T15:33:20.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 100% and the router requires a reboot for normal operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41601/ - https://cxsecurity.com/issue/WLB-2017030029 - https://packetstorm
rences: - https://www.exploit-db.com/exploits/41601/ - https://cxsecurity.com/issue/WLB-2017030029 - https://packetstormsecurity.com/files/141449/Mikrotik-Hap-Lite-6.25-Denial-Of-Service.html - http://www.exploitalert.com/view-details.html?id=26137
CVE ID: CVE-2017-6445 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely. Additional Analyst Notes: - CVE Program Container: References: - https://tech.feedyourhead.at/content/openelec-remote-code-execution-vulnerability-through-man-in-the-middle - https://tech.feedyourhead.at/content/openelec-cve-2017-6445-revisited - http://www.securityfocus.com/bi
-in-the-middle - https://tech.feedyourhead.at/content/openelec-cve-2017-6445-revisited - http://www.securityfocus.com/bid/96580
CVE ID: CVE-2017-6446 State: PUBLISHED Published: 2017-03-05T21:00:00 Last Updated: 2024-08-05T15:33:20.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96575 - https://dev.dotclear.org/2.0/changeset/1e44804e7c85b45f42245111c8c0de100a2ff6e3
CVE ID: CVE-2017-6448 State: PUBLISHED Published: 2017-04-03T05:44:00 Last Updated: 2024-08-05T15:33:20.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257 - http://www.securityfocus.com/bid/97313 - https://github.com/radare/radare2/issues/6885
CVE ID: CVE-2017-6451 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:20.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write. Additional Analyst Notes: - CVE Program Container: References: - http://support.ntp.org/bin/view/Main/NtpBug3378 - http://www.securitytracker.com/id/1038123 - http://www.securityfocus.com/bid/97058 - https://support.apple.com/HT208144 - http
/www.securitytracker.com/id/1038123 - http://www.securityfocus.com/bid/97058 - https://support.apple.com/HT208144 - http://www.securitytracker.com/id/1039427 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
CVE ID: CVE-2017-6452 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:19.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038123 - https://support.apple.com/HT208144 - http://support.ntp.org/bin/view/Main/NtpBug3383 - http://www.securitytracker.com/id/1039427 - http://www.securityfocus.com/bid/97078 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2
er.com/id/1039427 - http://www.securityfocus.com/bid/97078 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
CVE ID: CVE-2017-6453 State: REJECTED Published: 2017-03-15T21:00:00 Last Updated: 2017-03-15T20:57:01 Description: No description available.
CVE ID: CVE-2017-6454 State: REJECTED Published: 2017-03-15T21:00:00 Last Updated: 2017-03-15T20:57:01 Description: No description available.
CVE ID: CVE-2017-6455 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:20.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038123 - https://support.apple.com/HT208144 - http://www.securityfocus.com/bid/97074 - http://www.securitytracker.com/id/1039427 - http://support.ntp.org/bin/view/Main/NtpBug3384 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
CVE ID: CVE-2017-6456 State: REJECTED Published: 2017-03-15T21:00:00 Last Updated: 2017-03-15T20:57:01 Description: No description available.
CVE ID: CVE-2017-6457 State: REJECTED Published: 2017-03-15T21:00:00 Last Updated: 2017-03-15T20:57:01 Description: No description available.
CVE ID: CVE-2017-6458 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:19.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038123 - http://support.ntp.org/bin/view/Main/NtpBug3379 - https://support.apple.com/HT208144 - http://www.securityfocus.com/bid/97051 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu - https://support.apple.com/kb
51 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu - https://support.apple.com/kb/HT208144 - http://www.ubuntu.com/usn/USN-3349-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZUPPICJXWL3AWQB7I3AWUC74YON7UING/ - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-294/ - https://bto.bluecoat.com/security-advisory/sa147 - http://seclists.org/fulldisclosure/2017/Nov/7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/ - https://support.f5.com/csp/article/K99254031 - h
e%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/ - https://support.f5.com/csp/article/K99254031 - http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html - http://seclists.org/fulldisclosure/2017/Sep/62 - http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4B7BMVXV53EE7XYW2KAVETDHTP452O3Z/ - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2017-6459 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:19.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038123 - https://support.apple.com/HT208144 - http://support.ntp.org/bin/view/Main/NtpBug3382 - http://www.securityfocus.com/bid/97076 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
CVE ID: CVE-2017-6460 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:19.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038123 - https://support.apple.com/HT208144 - http://www.securityfocus.com/bid/97052 - http://support.ntp.org/bin/view/Main/NtpBug3377 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Se
rt.ntp.org/bin/view/Main/NtpBug3377 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us - https://security.paloaltonetworks.com/CVE-2017-6460
CVE ID: CVE-2017-6461 State: REJECTED Published: 2017-03-15T21:00:00 Last Updated: 2017-03-15T20:57:01 Description: No description available.
CVE ID: CVE-2017-6462 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:20.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038123 - http://www.securityfocus.com/bid/97045 - https://support.apple.com/HT208144 - https://usn.ubuntu.com/3707-2/ - http://support.ntp.org/bin/view/Main/NtpBug3388 - https://security.FreeBSD.org/advisories/FreeBSD-SA-1
ntu.com/3707-2/ - http://support.ntp.org/bin/view/Main/NtpBug3388 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc - https://access.redhat.com/errata/RHSA-2017:3071 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu - https://access.redhat.com/errata/RHSA-2018:0855 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
CVE ID: CVE-2017-6463 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:18.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038123 - https://support.apple.com/HT208144 - https://usn.ubuntu.com/3707-2/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc - http://www.securityfocus.com/bid/97049 - https://access.redhat.com/errata/RHSA-2017:307
ories/FreeBSD-SA-17:03.ntp.asc - http://www.securityfocus.com/bid/97049 - https://access.redhat.com/errata/RHSA-2017:3071 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu - http://support.ntp.org/bin/view/Main/NtpBug3387 - https://access.redhat.com/errata/RHSA-2018:0855 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
CVE ID: CVE-2017-6464 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:20.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038123 - https://support.apple.com/HT208144 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc - http://www.securityfocus.com/bid/97050 - https://access.redhat.com/errata/RHSA-2017:3071 - http://support.ntp.org/bin/view/Main/NtpBug3389 - http://support.ntp.org
tps://access.redhat.com/errata/RHSA-2017:3071 - http://support.ntp.org/bin/view/Main/NtpBug3389 - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu - https://access.redhat.com/errata/RHSA-2018:0855 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
CVE ID: CVE-2017-6465 State: PUBLISHED Published: 2017-03-10T01:00:00 Last Updated: 2024-08-05T15:33:20.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/141456/FTPShell-Client-6.53-Buffer-Overflow.html - https://www.exploit-db.com/exploits/41511/ - http://www.securityfocus.com/bid/96570
CVE ID: CVE-2017-6466 State: PUBLISHED Published: 2017-03-11T06:46:00 Last Updated: 2024-08-05T15:33:20.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the SYSTEM account. Note that when Software Updater is configured to install updates automatically, it checks if the downloaded file is digitally signed by default, but does not check the author of the signature. When running in manual mode
nloaded file is digitally signed by default, but does not check the author of the signature. When running in manual mode (default), no signature check is performed. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Mar/28 - http://www.securityfocus.com/bid/96784
CVE ID: CVE-2017-6467 State: PUBLISHED Published: 2017-03-04T03:38:00 Last Updated: 2024-08-05T15:33:20.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12083 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=284ad58d288722a8725401967bff0c4455488f0c - http://www.securityfocus.com/bid/96561 - http://www.debian.org/security
t%3Bh=284ad58d288722a8725401967bff0c4455488f0c - http://www.securityfocus.com/bid/96561 - http://www.debian.org/security/2017/dsa-3811 - https://www.wireshark.org/security/wnpa-sec-2017-11.html
CVE ID: CVE-2017-6468 State: PUBLISHED Published: 2017-03-04T03:38:00 Last Updated: 2024-08-05T15:33:20.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9f3bc84b7e7e435c50b8b68f0fc526d0f5676cbf - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13430 - https://www.wireshark.org/security/wnpa-sec-2017-08.html - http:
s://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13430 - https://www.wireshark.org/security/wnpa-sec-2017-08.html - http://www.securityfocus.com/bid/96569 - http://www.debian.org/security/2017/dsa-3811
CVE ID: CVE-2017-6469 State: PUBLISHED Published: 2017-03-04T03:38:00 Last Updated: 2024-08-05T15:33:20.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by ensuring that memory is allocated for a certain data structure. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f753c127082d5e28abf482d6d175cbfee6661f7 - https://www.wireshark.org/security/wnpa-sec-2017-03.html - https://bugs.wireshark.org/bugzi
e28abf482d6d175cbfee6661f7 - https://www.wireshark.org/security/wnpa-sec-2017-03.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13346 - http://www.securityfocus.com/bid/96577 - http://www.debian.org/security/2017/dsa-3811
CVE ID: CVE-2017-6470 State: PUBLISHED Published: 2017-03-04T03:38:00 Last Updated: 2024-08-05T15:33:20.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13432 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=0b89174ef4c531a1917437fff586fe525ee7bf2d - https://www.wireshark.org/security/wnpa-sec-2017-10.html - http://w
ommit%3Bh=0b89174ef4c531a1917437fff586fe525ee7bf2d - https://www.wireshark.org/security/wnpa-sec-2017-10.html - http://www.securityfocus.com/bid/96563 - http://www.debian.org/security/2017/dsa-3811