CVE

Id
89344  
CVE No.
CVE-2016-2525  
Status
Candidate  
Description
epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.  
Phase
Assigned (20160220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
775149 89344 CVE-2016-2525 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2016-05.html  View
775150 89344 CVE-2016-2525 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12077  View
775151 89344 CVE-2016-2525 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6a47ac7624993b99966e1d813245ffb419a2d201  View
775152 89344 CVE-2016-2525 GENTOO:GLSA-201604-05  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3368 JVNDB-2016-004141 Mozilla Firefox の nsBidi::BracketData::AddOpening 関数におけるヒープベースのバッファオーバーフローの脆弱性 Mozilla Firefox の nsBidi::BracketData::AddOpening 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-2838 89344 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004141.html  View