Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8715 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does not check for empty arguments, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11607 - http://www.debian.org/security/2016/dsa-3505 - http://www.securityfocus.com/bid/79816 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security
rityfocus.com/bid/79816 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40caff2d1fb08262c84aaaa8ac584baa8866dd7c - http://www.wireshark.org/security/wnpa-sec-2015-34.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8716 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init_t38_info_conv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eb6ccb1b0c4ad02b828652c3fe6e8d51c30a315e - http://www.debian.org/security/2016/dsa-3505 - http://www.securityfocus.com/bid/79816 -
4ad02b828652c3fe6e8d51c30a315e - http://www.debian.org/security/2016/dsa-3505 - http://www.securityfocus.com/bid/79816 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9887 - http://www.wireshark.org/security/wnpa-sec-2015-35.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8717 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_sdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3505 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2ddd92b6f8f587325b9e14598658626f3a007c5c - http://www.securityfocus.com/bid/79816 - htt
b?p=wireshark.git%3Ba=commit%3Bh=2ddd92b6f8f587325b9e14598658626f3a007c5c - http://www.securityfocus.com/bid/79816 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9887 - http://www.securitytracker.com/id/1034551 - http://www.wireshark.org/security/wnpa-sec-2015-36.html
CVE ID: CVE-2015-8718 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async NLM" option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3505 - http://www.wireshark.org/security/wnpa-sec-2015-37.html - http://www.securityfocus.com/bid/79814 - https://security.gentoo
tp://www.wireshark.org/security/wnpa-sec-2015-37.html - http://www.securityfocus.com/bid/79814 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81dfe6d450ada42d12f20ac26a6d8ae2302df37e
CVE ID: CVE-2015-8719 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_dns_answer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 Client Subnet option, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-38.html - http://www.debian.org/security/2016/dsa-3505 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=30651ab18b42e666f57ea239e58
rity/2016/dsa-3505 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=30651ab18b42e666f57ea239e58f3ff3a5e9c4ad - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10988 - http://www.securityfocus.com/bid/79816 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8720 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3505 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=921bb07115fbffc081ec56a5022b4a9d58db6d39 - http://www.
//code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=921bb07115fbffc081ec56a5022b4a9d58db6d39 - http://www.securityfocus.com/bid/79814 - http://www.wireshark.org/security/wnpa-sec-2015-39.html - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8721 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet with zlib compression. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-40.html - http://www.debian.org/security/2016/dsa-3505 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11548 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3B
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11548 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cec0593ae6c3bca65eff65741c2a10f3de3e0afe - http://www.securityfocus.com/bid/79814 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8722 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-41.html - http://www.debian.org/security/2016/dsa-3505 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11767 - https://code.wireshark.org
bian.org/security/2016/dsa-3505 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11767 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2259bf8a827088081bef101f98e4983de8aa8099 - http://www.securityfocus.com/bid/79814 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1b32d505a59475d51d9b2bed5f0869d2d154e8b6 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8723 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40b283181c63cb28bc6f58d80315eccca6650
erences: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40b283181c63cb28bc6f58d80315eccca6650da0 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11790 - http://www.securityfocus.com/bid/79382 - http://www.debian.org/security/2016/dsa-3505 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551 - http://www.wireshark.org/security/wnpa-sec-2015-42.html
CVE ID: CVE-2015-8724 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key length, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83f2818118ae255db949bb3a4b3a26ebd1c5f7c5 - http://www.securityfocus.com/bid
review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83f2818118ae255db949bb3a4b3a26ebd1c5f7c5 - http://www.securityfocus.com/bid/79382 - http://www.debian.org/security/2016/dsa-3505 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11826 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551 - http://www.wireshark.org/security/wnpa-sec-2015-42.html
CVE ID: CVE-2015-8725 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=aaa28a9d39158ca1033bbd3372cf423abbf4f202 - htt
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=aaa28a9d39158ca1033bbd3372cf423abbf4f202 - http://www.securityfocus.com/bid/79382 - http://www.debian.org/security/2016/dsa-3505 - http://www.wireshark.org/security/wnpa-sec-2015-43.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11792 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8726 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292 - http://www.securityfocus.com/bid/79382 - https://b
reshark.git%3Ba=commit%3Bh=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292 - http://www.securityfocus.com/bid/79382 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=185911de7d337246044c8e99da2f5b4bac74c0d5 - http://www.debian.org/security/2016/dsa-3505 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.wireshark.org/security/wnpa-sec-2015-44.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8727 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:20.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain request-key data, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=56baca60271379cb97f6a4a6bf72eb526e8b52d0 - http://www.securityfocus.com/bid/79382 - h
web?p=wireshark.git%3Ba=commit%3Bh=56baca60271379cb97f6a4a6bf72eb526e8b52d0 - http://www.securityfocus.com/bid/79382 - http://www.debian.org/security/2016/dsa-3505 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11793 - http://www.wireshark.org/security/wnpa-sec-2015-45.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8728 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:20.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly uses the tvb_bcd_dig_to_wmem_packet_str function, which allows remote attackers to cause a denial of service (buffer overflow and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-46.html - http://www.
lyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-46.html - http://www.securityfocus.com/bid/79382 - http://www.debian.org/security/2016/dsa-3505 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=15edc8d714b11dcff3a04e5d00b8db9adfdb81ed - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11797 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8729 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\0' character at the end of a date string, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=338da1c0ea0b2f8595d3a7b6d6c9548f7da3e27b - http://www.securityf
reshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=338da1c0ea0b2f8595d3a7b6d6c9548f7da3e27b - http://www.securityfocus.com/bid/79382 - http://www.debian.org/security/2016/dsa-3505 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11794 - http://www.wireshark.org/security/wnpa-sec-2015-47.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8730 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-48.html - http://www.securityfocus.com/bid/79382 - http://www.debian.org/security/2016/dsa-3505 - https://security.gentoo.org/glsa/201604-05 -
curityfocus.com/bid/79382 - http://www.debian.org/security/2016/dsa-3505 - https://security.gentoo.org/glsa/201604-05 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d2644aef369af0667220b5bd69996915b29d753d - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11815 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8731 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV types, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3516 - http://www.securityfocus.com/bid/79382 - http://www.wireshark.org/security/wnpa-sec-2015-49.html - https://code.wi
516 - http://www.securityfocus.com/bid/79382 - http://www.wireshark.org/security/wnpa-sec-2015-49.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2930d3105c3ff2bfb1278b34ad10e2e71c3b8fb0 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11829 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8732 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:20.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile Number field, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11830 - http://www.securityfocus.com/bid/79382 - http://www.d
ces: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11830 - http://www.securityfocus.com/bid/79382 - http://www.debian.org/security/2016/dsa-3505 - http://www.wireshark.org/security/wnpa-sec-2015-50.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9352616ec9742f2ed3d2802d0c8c100d51ca410b - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eb0c034f6e4cdbf5ae36dd9ba8e2743630b7bd38 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8733 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=53a3e53fce30523d11ab3df319fba7b75d63076f -
es: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=53a3e53fce30523d11ab3df319fba7b75d63076f - http://www.debian.org/security/2016/dsa-3505 - http://www.securityfocus.com/bid/79814 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11827 - https://security.gentoo.org/glsa/201604-05 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.wireshark.org/security/wnpa-sec-2015-51.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8734 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:20.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-52.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11726 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9b2c889abe0219fc162659e106c5b95deb6268
d=11726 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9b2c889abe0219fc162659e106c5b95deb6268f3 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8735 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (invalid write operation and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11817 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83bad0215dae54e77d34f8b1879001
ug.cgi?id=11817 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83bad0215dae54e77d34f8b187900125f672366e - http://www.securityfocus.com/bid/79382 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1034551 - http://www.wireshark.org/security/wnpa-sec-2015-53.html