Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-14342 State: PUBLISHED Published: 2018-07-19T02:00:00 Last Updated: 2024-08-05T09:21:41.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741 - http://www.securitytracker.com/id/1041608 - https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=36af43dbb76
lts-announce/2018/07/msg00045.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=36af43dbb7673495948cd65d0346e8b9812b941c - https://www.wireshark.org/security/wnpa-sec-2018-34.html - http://www.securityfocus.com/bid/104847 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-14343 State: PUBLISHED Published: 2018-07-19T02:00:00 Last Updated: 2024-08-05T09:21:41.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9402f2f80c6bc7d25178a0875c5a1f5ee36361db - http://www.securitytracker.com/id/1041608 - https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html - https://www
://www.securitytracker.com/id/1041608 - https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html - https://www.wireshark.org/security/wnpa-sec-2018-37.html - http://www.securityfocus.com/bid/104847 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-14344 State: PUBLISHED Published: 2018-07-19T02:00:00 Last Updated: 2024-08-05T09:21:41.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672 - http://www.securitytracker.com/id/1041608 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f7153685b39a164aea09ba7f96ebb648b8328ae - https://www.wireshark.org/secur
/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f7153685b39a164aea09ba7f96ebb648b8328ae - https://www.wireshark.org/security/wnpa-sec-2018-35.html - http://www.securityfocus.com/bid/104847 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-14345 State: PUBLISHED Published: 2018-07-17T14:00:00Z Last Updated: 2024-09-17T01:31:46.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and helper/backend/PamBackend.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1101450 - https://github.com/sddm/sddm/commit/147cec383892d143b5e02daa70f1e7def50f5d98
CVE ID: CVE-2018-14346 State: PUBLISHED Published: 2018-07-17T15:00:00 Last Updated: 2024-08-05T09:21:41.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c). Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4290 - https://lists.debian.org/debian-lts-announce/2018/08/msg00025.html - https://gnunet.org/git/libextractor.git/commit/?id=ad19e7fe0adc99d5710eff1ed48d91a7b75a950e - http://lists.gnu.org/archive/html/bug-libextractor/2018-07/msg00001.html
CVE ID: CVE-2018-14347 State: PUBLISHED Published: 2018-07-17T15:00:00 Last Updated: 2024-08-05T09:21:41.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c). Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4290 - https://gnunet.org/bugs/view.php?id=5399 - https://lists.debian.org/debian-lts-announce/2018/08/msg00025.html - https://gnunet.org/git/libextractor.git/commit/?id=f033468cd36e2b8bf92d747fbd683b2ace8da394 - http://lists.gnu.org/archive/html/bug-libextractor/2018-07/msg00000.html
CVE ID: CVE-2018-14348 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T09:21:41.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1100365 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3VH333EONOEEGKOLHHFXCJYHCYMHJ4KK/ - https://sourceforge.net/p/libcg/libcg/ci/0d88b73d189ea3440ccaab00418d6469f76fa590/ - http://lists.opensuse.org/opensuse-security-annou
forge.net/p/libcg/libcg/ci/0d88b73d189ea3440ccaab00418d6469f76fa590/ - http://lists.opensuse.org/opensuse-security-announce/2018-08/msg00023.html - https://lists.debian.org/debian-lts-announce/2018/08/msg00019.html - https://access.redhat.com/errata/RHSA-2019:2047
CVE ID: CVE-2018-14349 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:21:41.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416 - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2
11539d9b7ebceae4416 - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release - https://github.com/neomutt/neomutt/commit/36a29280448097f34ce9c94606195f2ac643fed1
CVE ID: CVE-2018-14350 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:21:41.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104931 - https://usn.ubuntu.com/3719-3/ - https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870 - https://www.debian.org/security/2018/dsa-4277 - https://usn.ubuntu.com/3719-2/ - https://lists.debian.org/debian-lts-announce/2018
w.debian.org/security/2018/dsa-4277 - https://usn.ubuntu.com/3719-2/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release - https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485 - https://usn.ubuntu.com/3719-1/
CVE ID: CVE-2018-14351 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:21:41.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://github.com/neomutt/neomutt/commit/3c49c44be9b459d9c616bcaef6eb5d51298c1741 - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - http
c44be9b459d9c616bcaef6eb5d51298c1741 - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release - https://gitlab.com/muttmua/mutt/commit/e57a8602b45f58edf7b3ffb61bb17525d75dfcb1
CVE ID: CVE-2018-14352 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:21:41.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d - https://usn.ubuntu.com/3719-2/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https:/
6e42865d - https://usn.ubuntu.com/3719-2/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release - https://usn.ubuntu.com/3719-1/
CVE ID: CVE-2018-14353 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:21:41.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2
18/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release - https://usn.ubuntu.com/3719-1/ - https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23
CVE ID: CVE-2018-14354 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:50.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2526 - https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 -
152818541f5cdc059cbff3f3e8b654fc27c1d - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://github.com/neomutt/neomutt/commit/95e80bf9ff10f68cb6443f760b85df4117cb15eb - https://usn.ubuntu.com/3719-2/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.securityfocus.com/bid/104925 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release - https://usn.ubuntu.com/3719-1/
CVE ID: CVE-2018-14355 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:50.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d - https
ounce/2018/08/msg00001.html - https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release
CVE ID: CVE-2018-14356 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:50.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3719-3/ - https://github.com/neomutt/neomutt/commit/93b8ac558752d09e1c56d4f1bc82631316fa9c82 - https://www.debian.org/security/2018/dsa-4277 - https://gitlab.com/muttmua/mutt/commit/e154cba1b3fc52bb8cb8aa846353c0db79b5d9c6 - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201
c0db79b5d9c6 - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release
CVE ID: CVE-2018-14357 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:50.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2526 - https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://lists
059cbff3f3e8b654fc27c1d - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725 - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release - https://usn.ubuntu.com/3719-1/
CVE ID: CVE-2018-14358 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:50.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3719-3/ - https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870 - https://www.debian.org/security/2018/dsa-4277 - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.
://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release - https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485 - https://usn.ubuntu.com/3719-1/
CVE ID: CVE-2018-14359 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:50.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3719-3/ - https://gitlab.com/muttmua/mutt/commit/3d9028fec8f4d08db2251096307c0bbbebce669a - https://www.debian.org/security/2018/dsa-4277 - https://usn.ubuntu.com/3719-2/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - ht
ian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release - https://usn.ubuntu.com/3719-1/ - https://github.com/neomutt/neomutt/commit/6f163e07ae68654d7ac5268cbb7565f6df79ad85
CVE ID: CVE-2018-14360 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:51.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4277 - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://neomutt.org/2018/07/16/release - https://github.com/neomutt/neomutt/commit/6296f7153f0c9d5e5cd3aaf08f9731e56621bdd3
CVE ID: CVE-2018-14361 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:50.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4277 - https://github.com/neomutt/neomutt/commit/9e927affe3a021175f354af5fa01d22657c20585 - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://neomutt.org/2018/07/16/release
CVE ID: CVE-2018-14362 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:50.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576 - https://access.redhat.com/errata/RHSA-2018:2526 - https://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://github.com/neomutt/neomutt/commit/9b
://usn.ubuntu.com/3719-3/ - https://www.debian.org/security/2018/dsa-4277 - https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://security.gentoo.org/glsa/201810-07 - http://www.mutt.org/news.html - https://neomutt.org/2018/07/16/release
CVE ID: CVE-2018-14363 State: PUBLISHED Published: 2018-07-17T17:00:00 Last Updated: 2024-08-05T09:29:50.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4277 - https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e - https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - https://neomutt.org/2018/07/16/release
CVE ID: CVE-2018-14364 State: PUBLISHED Published: 2018-07-18T19:00:00 Last Updated: 2024-08-05T09:29:50.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/49133 - https://hackerone.com/reports/378148 - https://about.gitlab.com/2018/07/17/critical-security-release-gitlab-11-dot-0-dot-4-released/
CVE ID: CVE-2018-14366 State: PUBLISHED Published: 2018-09-06T23:00:00 Last Updated: 2024-08-05T09:29:50.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877
CVE ID: CVE-2018-14367 State: PUBLISHED Published: 2018-07-19T02:00:00 Last Updated: 2024-08-05T09:29:51.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966 - http://www.securitytracker.com/id/1041608 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310 - https://www.wireshark.org/security/wnpa-sec-2018-42.html - http
Ba=commit%3Bh=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310 - https://www.wireshark.org/security/wnpa-sec-2018-42.html - http://www.securityfocus.com/bid/104847 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-14368 State: PUBLISHED Published: 2018-07-19T02:00:00 Last Updated: 2024-08-05T09:29:50.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-40.html - http://www.securitytracker.com/id/1041608 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c44312f465014eb409d766a9828b7f101f6251c - https://bugs.wireshark.
hark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c44312f465014eb409d766a9828b7f101f6251c - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841 - https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html - http://www.securityfocus.com/bid/104847 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-14369 State: PUBLISHED Published: 2018-07-19T02:00:00 Last Updated: 2024-08-05T09:29:50.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041608 - https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=038cd225bfa54e2a7ade4043118796334920a61e - htt
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=038cd225bfa54e2a7ade4043118796334920a61e - https://www.wireshark.org/security/wnpa-sec-2018-41.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869 - http://www.securityfocus.com/bid/104847 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html