Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2505 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-05T23:32:20.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28333006. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/4f236c532039a61f0cf681d2e3c6e022911bbb5c - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-2506 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-05T23:32:20.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate a certain offset value, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28175045. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/e248db02fbab2ee9162940bc19f087fd7d96cb9d - http://source.android
tps://android.googlesource.com/platform/frameworks/av/+/e248db02fbab2ee9162940bc19f087fd7d96cb9d - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-2507 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-05T23:32:20.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28532266. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/frameworks/av/+/605
p://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/frameworks/av/+/60547808ca4e9cfac50028c00c58a6ceb2319301
CVE ID: CVE-2016-2508 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-05T23:32:20.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate certain track data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28799341. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/fr
References: - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/frameworks/av/+/d112f7d0c1dbaf0368365885becb11ca8d3f13a4 - https://android.googlesource.com/platform/frameworks/av/+/f81038006b4c59a5a148dcad887371206033c28f
CVE ID: CVE-2016-2509 State: PUBLISHED Published: 2016-02-18T22:00:00 Last Updated: 2024-08-05T23:32:20.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/507216 - https://www.belden.com/resourcecenter/security/upload/Belden_Security_Advisory_BSECV-2016-2_1v0.pdf
CVE ID: CVE-2016-2510 State: PUBLISHED Published: 2016-04-07T20:00:00 Last Updated: 2024-08-05T23:32:20.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2035.html - http://www.securityfocus.com/bid/84139 - https://access.redhat.com/errata/RHSA-2016:1135 - http://rhn.redhat.com/errata/RHSA-2016-0540.html - https://access.redhat.com/errata/RHSA-2016:1376 -
ta/RHSA-2016:1135 - http://rhn.redhat.com/errata/RHSA-2016-0540.html - https://access.redhat.com/errata/RHSA-2016:1376 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00056.html - http://rhn.redhat.com/errata/RHSA-2016-0539.html - http://www.debian.org/security/2016/dsa-3504 - http://www.securitytracker.com/id/1035440 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00078.html - http://www.ubuntu.com/usn/USN-2923-1 - https://security.gentoo.org/glsa/201607-17 - https://access.redhat.com/errata/RHSA-2019:1545 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/frohoff/ysoserial/pull/13 - https://github.com/beanshell/beanshell/commit
ty-alerts/cpuoct2020.html - https://github.com/frohoff/ysoserial/pull/13 - https://github.com/beanshell/beanshell/commit/7c68fde2d6fc65e362f20863d868c112a90a9b49 - https://github.com/beanshell/beanshell/commit/1ccc66bb693d4e46a34a904db8eeff07808d2ced - https://github.com/beanshell/beanshell/releases/tag/2.0b6 - https://www.rsaconference.com/writable/presentations/file_upload/asd-f03-serial-killer-silently-pwning-your-java-endpoints.pdf
CVE ID: CVE-2016-2511 State: PUBLISHED Published: 2016-04-07T21:00:00 Last Updated: 2024-08-05T23:32:20.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135886/WebSVN-2.3.3-Cross-Site-Scripting.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179168.html - http://www.debian.org/security/2016/dsa-3490 - http://seclists.org/fulldisclosure/2016/Feb/99
CVE ID: CVE-2016-2512 State: PUBLISHED Published: 2016-04-08T15:00:00 Last Updated: 2024-08-05T23:32:20.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0506.html - http://www.securitytracker.com/id/1035152 - http://www.securityfocus.com/bid/8387
edhat.com/errata/RHSA-2016-0506.html - http://www.securitytracker.com/id/1035152 - http://www.securityfocus.com/bid/83879 - http://rhn.redhat.com/errata/RHSA-2016-0504.html - http://www.debian.org/security/2016/dsa-3544 - http://rhn.redhat.com/errata/RHSA-2016-0502.html - http://www.ubuntu.com/usn/USN-2915-3 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2915-2 - http://rhn.redhat.com/errata/RHSA-2016-0505.html - http://www.ubuntu.com/usn/USN-2915-1 - https://www.djangoproject.com/weblog/2016/mar/01/security-releases/ - https://github.com/django/django/commit/c5544d289233f501917e25970c03ed444abbd4f0
CVE ID: CVE-2016-2513 State: PUBLISHED Published: 2016-04-08T15:00:00 Last Updated: 2024-08-05T23:32:20.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0506.html - https://github.com/django/django/commit/67b46ba7016da2d259c1ecc7d666d11f5e1cfaab - http://www.securitytracker.com/id/1035152 - http://rhn.redhat.com/errata/RHSA-2016-0504.html - http://www.debian.org/security/2016/dsa-3544 - http://r
/id/1035152 - http://rhn.redhat.com/errata/RHSA-2016-0504.html - http://www.debian.org/security/2016/dsa-3544 - http://rhn.redhat.com/errata/RHSA-2016-0502.html - http://www.ubuntu.com/usn/USN-2915-3 - http://www.securityfocus.com/bid/83878 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2915-2 - http://rhn.redhat.com/errata/RHSA-2016-0505.html - http://www.ubuntu.com/usn/USN-2915-1 - https://www.djangoproject.com/weblog/2016/mar/01/security-releases/
CVE ID: CVE-2016-2515 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:32:20.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1) header or (2) URI that is matched against an improper regular expression. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hueniverse/hawk/commit/0833f99ba64558525995a7e21d4093da1f3e15fa - https://github.com/hueniverse/hawk/issues/168 - https://nodesecurity.io/advisories/77 - https://bugzilla.redhat.com/show_bug.cgi?id=1309721 - http://www.openwall.com/
- https://nodesecurity.io/advisories/77 - https://bugzilla.redhat.com/show_bug.cgi?id=1309721 - http://www.openwall.com/lists/oss-security/2016/02/20/1 - http://www.openwall.com/lists/oss-security/2016/02/20/2
CVE ID: CVE-2016-2516 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-05T23:32:20.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3629 - http://www.securityfocus.com/bid/88180 - https://www.kb.cert.org/vuls/id/718152 - http://www.securitytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://se
ritytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/ntap-20171004-0002/ - http://support.ntp.org/bin/view/Main/NtpBug3011 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - https://security.gentoo.org/glsa/201607-15
CVE ID: CVE-2016-2517 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-05T23:32:20.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. NOTE: this vulnerability exists because of a CVE-2016-2516 regression. Additional Analyst Notes: - CVE Program Container: References: - http://support.ntp.org/bin/view/Main/NtpBug3010 - http://www.securityfocus.com/bid/88189 - https://www.k
: References: - http://support.ntp.org/bin/view/Main/NtpBug3010 - http://www.securityfocus.com/bid/88189 - https://www.kb.cert.org/vuls/id/718152 - http://www.securitytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/ntap-20171004-0002/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - https://security.gentoo.org/glsa/201607-15
CVE ID: CVE-2016-2518 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-05T23:32:20.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3096-1 - http://www.debian.org/security/2016/dsa-3629 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://support.ntp.org/bin/view/Main/NtpBug3009 - http://www.oracle.com/technetwork/topics/security/linuxbulletinap
ml - http://support.ntp.org/bin/view/Main/NtpBug3009 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://access.redhat.com/errata/RHSA-2016:1141 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - https://www.kb.cert.org/vuls/id/718152 - http://rhn.redhat.com/errata/RHSA-2016-1552.html - http://www.securitytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/ntap-20171004-0002/ - http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_ntp_4_2_8p7_Security - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/c
/SecurityNotice#April_2016_ntp_4_2_8p7_Security - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://www.securityfocus.com/bid/88226 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html - http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html - http://lists.f
-Advisory-ntp-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html - https://www.debian.org/security/2016/dsa-3629 - http://www.securityfocus.com/archive/1/538233/100/0/threaded - https://support.f5.com/csp/article/K20804323 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html - http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html - http://lists.fedoraproject.org/pipermail/package-an
ists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2016-2519 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-05T23:32:20.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value. Additional Analyst Notes: - CVE Program Container: References: - http://support.ntp.org/bin/view/Main/NtpBug3008 - https://www.kb.cert.org/vuls/id/718152 - http://www.securitytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/nt
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/ntap-20171004-0002/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - http://www.securityfocus.com/bid/88204 - https://security.gentoo.org/glsa/201607-15
CVE ID: CVE-2016-2521 State: PUBLISHED Published: 2016-02-28T02:00:00 Last Updated: 2024-08-05T23:32:20.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges via a Trojan horse riched20.dll.dll file in the current working directory, related to use of QLibrary. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4a79cf2e1ab056faaddd252aa56520435b318a56 - http://www.wireshark.org/security/wnp
w/gitweb?p=wireshark.git%3Ba=commit%3Bh=4a79cf2e1ab056faaddd252aa56520435b318a56 - http://www.wireshark.org/security/wnpa-sec-2016-01.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1035118
CVE ID: CVE-2016-2522 State: PUBLISHED Published: 2016-02-28T02:00:00 Last Updated: 2024-08-05T23:32:20.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2016-02.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9b2f3f7c5c9205381cb72e42b
npa-sec-2016-02.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9b2f3f7c5c9205381cb72e42b66e97d8ed3abf63 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11828 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1035118
CVE ID: CVE-2016-2523 State: PUBLISHED Published: 2016-02-28T02:00:00 Last Updated: 2024-08-05T23:32:20.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html - http://www.wireshark.org/security/wnpa-sec-2016-03.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html - http://www.debian.org/security/2016/
c-2016-03.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html - http://www.debian.org/security/2016/dsa-3516 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=260afe11feb796d1fde992d8f8c133ebd950b573 - https://security.gentoo.org/glsa/201604-05 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11938 - http://www.securitytracker.com/id/1035118
CVE ID: CVE-2016-2524 State: PUBLISHED Published: 2016-02-28T02:00:00 Last Updated: 2024-08-05T23:32:20.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2016-04.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12002 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5a8020a1b6bb73fcb8bb7eb7d53177bc8a9fc703 - https://securit
de.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5a8020a1b6bb73fcb8bb7eb7d53177bc8a9fc703 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1035118
CVE ID: CVE-2016-2525 State: PUBLISHED Published: 2016-02-28T02:00:00 Last Updated: 2024-08-05T23:32:20.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6a47ac7624993b99966e1d813245ffb419a2d201 - http://www.wireshark.org/security/wnpa-sec-2016-05.html - https://security.gentoo.org/glsa/201604-05
13245ffb419a2d201 - http://www.wireshark.org/security/wnpa-sec-2016-05.html - https://security.gentoo.org/glsa/201604-05 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12077 - http://www.securitytracker.com/id/1035118
CVE ID: CVE-2016-2526 State: PUBLISHED Published: 2016-02-28T02:00:00 Last Updated: 2024-08-05T23:32:20.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11983 - http://www.wireshark.org/security/wnpa-sec-2016-06.html - https://security.gentoo.org/glsa/201604-05 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3B
-2016-06.html - https://security.gentoo.org/glsa/201604-05 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=69a679cc3a9c087064b7e9521b9e9f3c40dd0b72 - http://www.securitytracker.com/id/1035118
CVE ID: CVE-2016-2527 State: PUBLISHED Published: 2016-02-28T02:00:00 Last Updated: 2024-08-05T23:32:20.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: wiretap/nettrace_3gpp_32_423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11982 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=140aad08e081489b5cdb7
la/show_bug.cgi?id=11982 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=140aad08e081489b5cdb715cb5bca01db856fded - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1035118 - http://www.wireshark.org/security/wnpa-sec-2016-07.html
CVE ID: CVE-2016-2528 State: PUBLISHED Published: 2016-02-28T02:00:00 Last Updated: 2024-08-05T23:32:20.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c090e929269a78bf7a4cb3dc0d34565f4351312 - http://www.wireshark.org/security/wnpa-sec-2016-08.html - https://
commit%3Bh=1c090e929269a78bf7a4cb3dc0d34565f4351312 - http://www.wireshark.org/security/wnpa-sec-2016-08.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11984 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1035118