CVE

Id
89347  
CVE No.
CVE-2016-2528  
Status
Candidate  
Description
The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.  
Phase
Assigned (20160220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
775161 89347 CVE-2016-2528 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2016-08.html  View
775162 89347 CVE-2016-2528 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11984  View
775163 89347 CVE-2016-2528 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1c090e929269a78bf7a4cb3dc0d34565f4351312  View
775164 89347 CVE-2016-2528 GENTOO:GLSA-201604-05  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
2515 JVNDB-2016-003288 QEMU の NE2000 NIC エミュレーションサポートの ne2000_receive 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU の NE2000 NIC エミュレーションサポート (hw/net/ne2000.c) の ne2000_receive 関数には、サービス運用妨害 (無限ループおよび QEMU プロセスクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-2841 89347 2.1 6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003288.html  View