rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-9315 
Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to change Master Admin's password and/or add new admin accounts. This was resolved in Version 6.5 CP 1737.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-21T07:46:00.000Z
CVE-2016-9316 
Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allow authenticated, remote users with least privileges to inject arbitrary HTML/JavaScript code into web pages. This was resolved in Version 6.5 CP 1737.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-21T07:46:00.000Z
CVE-2016-9317 
The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-26T15:00:00.000Z
CVE-2016-9318 
libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-16T00:00:00.000Z
CVE-2016-9319 
There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-31T00:00:00.000Z
CVE-2016-9332 
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.
Problem types: description: Moxa SoftCMS denial-of-service
Affected products: vendor: n/a
product: Moxa SoftCMS prior to Version 1.6
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9333 
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input (SQL INJECTION).
Problem types: description: Moxa SoftCMS SQL INJECTION
Affected products: vendor: n/a
product: Moxa SoftCMS prior to Version 1.6
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9334 
An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. User credentials are sent to the web server in clear text, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.
Problem types: description: Rockwell Automation MicroLogix 1100 and 1400 cleartext password
Affected products: vendor: n/a
product: Rockwell Automation MicroLogix 1100 and 1400
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9335 
A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmware Version 5.0.190. Vulnerable versions of Stride-Managed Ethernet switches and Sixnet-Managed Industrial switches use hard-coded HTTP SSL/SSH keys for secure communication. Because these keys cannot be regenerated by users, all products use the same key. The attacker could disrupt communication or compromise the system. CVSS v3 base score: 10, CVSS vector string: (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Red Lion Controls recommends updating to SLX firmware Version 5.3.174.
Problem types: cwe_id: CWE-321
description: Use of hard-coded cryptographic key CWE-321
Affected products: vendor: Red Lion Controls
product: Sixnet-Managed Industrial Switches
vendor: AutomationDirect
product: STRIDE-Managed Ethernet Switch models
Published: 2018-05-09T13:00:00.000Z
CVE-2016-9337 
An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web browser functionality enabled. The vehicle's Gateway ECU is susceptible to commands that may allow an attacker to install malicious software allowing the attacker to send messages to the vehicle's CAN bus, a Command Injection.
Problem types: description: Tesla Gateway ECU Command Injection
Affected products: vendor: n/a
product: Tesla Gateway ECU on Model S automobile
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9338 
An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. Because of an Incorrect Permission Assignment for Critical Resource, users with administrator privileges may be able to remove all administrative users requiring a factory reset to restore ancillary web server function. Exploitation of this vulnerability will still allow the affected device to function in its capacity as a controller.
Problem types: description: Rockwell Automation MicroLogix 1100 and 1400 Incorrect Permission Assignment for Critical Resource
Affected products: vendor: n/a
product: Rockwell Automation MicroLogix 1100 and 1400
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9339 
An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to construct paths to files and directories without properly neutralizing special elements within the pathname that could allow an attacker to read files on the system, a Path Traversal.
Problem types: description: INTERSCHALT VDR G4e Path Traversal Vulnerability
Affected products: vendor: n/a
product: INTERSCHALT VDR G4e 5.220 and prior
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9343 
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.
Problem types: description: Rockwell Automation Logix5000 Programmable Automation Controller Buffer Overflow Vulnerability
Affected products: vendor: n/a
product: Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9344 
An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. An attacker may be able to brute force an active session cookie to be able to download configuration files.
Problem types: description: Moxa MiiNePort Session Hijack
Affected products: vendor: n/a
product: Moxa MiiNePort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9345 
An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system.
Problem types: description: Emerson DeltaV Easy Security Management Application Vulnerability
Affected products: vendor: n/a
product: Emerson DeltaV Easy Security Management through 13.3
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9346 
An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. Configuration data are stored in a file that is not encrypted.
Problem types: description: Moxa MiiNePort Configuration data not encrypted
Affected products: vendor: n/a
product: Moxa MiiNePort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9347 
An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards (WIOC) running the firmware available in the DeltaV system, release v13.3, have the SSH (Secure Shell) functionality enabled unnecessarily.
Problem types: description: Emerson DeltaV Wireless I/O Card Open SSH Port Vulnerability
Affected products: vendor: n/a
product: Emerson DeltaV Wireless I/O Card 13.3
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9348 
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4.  A configuration file contains parameters that represent passwords in plaintext.
Problem types: description: Moxa NPort Device passwords in plaintext
Affected products: vendor: n/a
product: Moxa NPort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9349 
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files that can result in information disclosure.
Problem types: description: Advantech SUSIAccess Server traverse the file system
Affected products: vendor: n/a
product: Advantech SUSIAccess Server 3.0 and prior
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9351 
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker to upload and unpack a zip file.
Problem types: description: Advantech SUSIAccess Server traversal
Affected products: vendor: n/a
product: Advantech SUSIAccess Server 3.0 and prior
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9353 
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the system and is encrypted with a static key hard-coded in the program. Attackers could reverse the admin account password for use.
Problem types: description: Advantech SUSIAccess Server static key hard-coded
Affected products: vendor: n/a
product: Advantech SUSIAccess Server 3.0 and prior
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9354 
An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption.
Problem types: description: Moxa DACenter Uncontrolled Resource Consumption
Affected products: vendor: n/a
product: Moxa DACenter 1.4 and older
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9355 
An issue was discovered in Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit, Version 9.5 and prior versions, and Version 9.7. An unauthorized user with physical access to an Alaris 8015 PC unit may be able to obtain unencrypted wireless network authentication credentials and other sensitive technical data by disassembling an Alaris 8015 PC unit and accessing the device's flash memory. Older software versions of the Alaris 8015 PC unit, Version 9.5 and prior versions, store wireless network authentication credentials and other sensitive technical data on the affected device's removable flash memory. Being able to remove the flash memory from the affected device reduces the risk of detection, allowing an attacker to extract stored data at the attacker's convenience.
Problem types: description: BD Alaris 8015 Insufficiently Protected Credentials Vulnerabilities
Affected products: vendor: n/a
product: BD Alaris 8015 Insufficiently Protected Credentials Vulnerabilities
Published: 2017-02-13T22:00:00.000Z
CVE-2016-9356 
An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search path issue.
Problem types: description: Moxa DACenter unquoted search path
Affected products: vendor: n/a
product: Moxa DACenter 1.4 and older
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9357 
An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life (EoL) and no longer supported: EAMxxx prior to June 30, 2015, EMAxxx prior to January 31, 2014, EAMAxx prior to January 31, 2014, EMAAxx prior to January 31, 2014, and ESWAxx prior to January 31, 2014. An unauthenticated attacker may be able to access configuration files with a specially crafted URL (Path Traversal).
Problem types: description: Eaton ePDU Path Traversal Vulnerability
Affected products: vendor: n/a
product: Eaton ePDU EoL devices
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9358 
A Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520, P574, SensorX13 QC flow line, SensorX23 QC Master, SensorX23 QC Slave, Speed Batcher, T374, T377, V36, V36B, and V36C; M3210 terminal associated with the same systems as the M3000 terminal identified above; M3000 desktop software associated with the same systems as the M3000 terminal identified above; MAC4 controller associated with the same systems as the M3000 terminal identified above; SensorX23 X-ray machine; SensorX25 X-ray machine; and MWS2 weighing system. The end user does not have the ability to change system passwords.
Problem types: cwe_id: CWE-259
description: CWE-259
Affected products: vendor: n/a
product: Marel Food Processing Systems
Published: 2017-06-30T02:35:00.000Z
CVE-2016-9360 
An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has access to an authenticated session.
Problem types: description: GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian retrieve user passwords
Affected products: vendor: n/a
product: GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9361 
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4.  Administration passwords can be retried without authenticating.
Problem types: description: Moxa NPort Device password retrieval
Affected products: vendor: n/a
product: Moxa NPort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9362 
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to edit and to view settings without authenticating.
Problem types: description: WAGO Ethernet Web-based Management Authentication Bypass Vulnerability
Affected products: vendor: n/a
product: WAGO Ethernet cards
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9363 
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4.  Buffer overflow vulnerability may allow an unauthenticated attacker to remotely execute arbitrary code.
Problem types: description: Moxa NPort Buffer overflow
Affected products: vendor: n/a
product: Moxa NPort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9364 
An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server.
Problem types: description: Fidelix FX-20 Series Controllers Path Traversal Vulnerability
Affected products: vendor: n/a
product: Fidelix FX-20 Series Controllers prior to 11.50.19
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9365 
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4.  Requests are not verified to be intentionally submitted by the proper user (CROSS-SITE REQUEST FORGERY).
Problem types: description: Moxa NPort Device csrf
Affected products: vendor: n/a
product: Moxa NPort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9366 
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4.  An attacker can freely use brute force to determine parameters needed to bypass authentication.
Problem types: description: Moxa NPort Device brute force
Affected products: vendor: n/a
product: Moxa NPort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9367 
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4.  The amount of resources requested by a malicious actor is not restricted, leading to a denial-of-service caused by resource exhaustion.
Problem types: description: Moxa NPort Device DoS
Affected products: vendor: n/a
product: Moxa NPort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9368 
An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior. By accessing a specific uniform resource locator (URL) on the webserver, a malicious user may be able to access files without authenticating.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: Eaton xComfort Ethernet Communication Interface
Published: 2017-03-14T09:02:00.000Z
CVE-2016-9369 
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4.  Firmware can be updated over the network without authentication, which may allow remote code execution.
Problem types: description: Moxa NPort Device firmware spoof
Affected products: vendor: n/a
product: Moxa NPort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9371 
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4.  User-controlled input is not neutralized before being output to web page (CROSS-SITE SCRIPTING).
Problem types: description: Moxa NPort Device XSS
Affected products: vendor: n/a
product: Moxa NPort
Published: 2017-02-13T21:00:00.000Z
CVE-2016-9372 
In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input with too many I/O objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-17T05:48:00.000Z
CVE-2016-9373 
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-17T05:48:00.000Z
CVE-2016-9374 
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-17T05:48:00.000Z