CVSS: 5.9EPSS: 0%CPEs: 16EXPL: 0CVE-2016-4082 – Debian Security Advisory 3585-1
https://notcve.org/view.php?id=CVE-2016-4082
25 Apr 2016 — epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service (out-of-bounds access and application crash) via a crafted packet. epan/dissectors/packet-gsm_cbch.c en el disector GSM CBCH en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 utiliza la variable incorrecta para indexar un array, lo que permite a at... • http://www.debian.org/security/2016/dsa-3585 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.9EPSS: 0%CPEs: 16EXPL: 0CVE-2016-4085 – Debian Security Advisory 3585-1
https://notcve.org/view.php?id=CVE-2016-4085
25 Apr 2016 — Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long string in a packet. Desbordamiento de buffer basado en pila en epan/dissectors/packet-ncp2222.inc en el disector NCP en Wireshark 1.12.x en versiones anteriores a 1.12.11 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posib... • http://www.debian.org/security/2016/dsa-3585 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0CVE-2016-2521 – Gentoo Linux Security Advisory 201604-05
https://notcve.org/view.php?id=CVE-2016-2521
28 Feb 2016 — Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges via a Trojan horse riched20.dll.dll file in the current working directory, related to use of QLibrary. Vulnerabilidad de ruta de búsqueda no confiable en la clase WiresharkApplication en ui/qt/wireshark_application.cpp en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.0.x en versiones anteri... • http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.1EPSS: 2%CPEs: 12EXPL: 0CVE-2016-2523 – Gentoo Linux Security Advisory 201604-05
https://notcve.org/view.php?id=CVE-2016-2523
28 Feb 2016 — The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. La función dnp3_al_process_object en epan/dissectors/packet-dnp.c en el disector DNP3 en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.0.x en versiones anteriores a 2.0.2 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de ... • http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html • CWE-399: Resource Management Errors •
CVSS: 5.9EPSS: 0%CPEs: 12EXPL: 0CVE-2016-2530 – Gentoo Linux Security Advisory 201604-05
https://notcve.org/view.php?id=CVE-2016-2530
28 Feb 2016 — The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet, a different vulnerability than CVE-2016-2531. La función dissct_rsl_ipaccess_msg en epan/dissectors/packet-rsl.c en el disector RSL en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.0... • http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.9EPSS: 0%CPEs: 12EXPL: 0CVE-2016-2531 – Gentoo Linux Security Advisory 201604-05
https://notcve.org/view.php?id=CVE-2016-2531
28 Feb 2016 — Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that triggers a 0xff tag value, a different vulnerability than CVE-2016-2530. Error por un paso en epan/dissectors/packet-rsl.c en el disector RSL en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.0.x en versiones anteriores a 2.0.2 permite a atacantes remoto... • http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.9EPSS: 0%CPEs: 12EXPL: 0CVE-2016-2532 – Gentoo Linux Security Advisory 201604-05
https://notcve.org/view.php?id=CVE-2016-2532
28 Feb 2016 — The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet. La función dissect_llrp_parameters en epan/dissectors/packet-llrp.c en el disector LLRP en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.0.x en versiones anteriores a 2.0.2 no limita la profundi... • http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 10EXPL: 0CVE-2015-8711 – Debian Security Advisory 3505-1
https://notcve.org/view.php?id=CVE-2015-8711
04 Jan 2016 — epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet. epan/dissectors/packet-nbap.c en el disector NBAP en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no valida datos de conversación, lo que permite a atacantes remotos provocar una denegación d... • http://www.debian.org/security/2016/dsa-3505 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2015-8712 – Debian Security Advisory 3505-1
https://notcve.org/view.php?id=CVE-2015-8712
04 Jan 2016 — The dissect_hsdsch_channel_info function in epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. La función dissect_hsdsch_channel_info en epan/dissectors/packet-umts_fp.c en el disector UMTS FP en Wireshark 1.12.x en versiones anteriores a 1.12.9 no valida el número de PDUs, lo que permite a atacantes remotos provocar una denegació... • http://www.debian.org/security/2016/dsa-3505 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2015-8713 – Debian Security Advisory 3505-1
https://notcve.org/view.php?id=CVE-2015-8713
04 Jan 2016 — epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet. epan/dissectors/packet-umts_fp.c en el disector UMTS FP en Wireshark 1.12.x en versiones anteriores a 1.12.9 no reserva correctamente memoria para mapeos de ID de canal, lo que permite a atacantes remotos provocar una denegación ... • http://www.debian.org/security/2016/dsa-3505 • CWE-20: Improper Input Validation CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •