CVE

Id
92174  
CVE No.
CVE-2016-5355  
Status
Candidate  
Description
wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.  
Phase
Assigned (20160609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
789569 92174 CVE-2016-5355 MLIST:[oss-security] 20160609 Re: CVE Request: wireshark releases  View
789570 92174 CVE-2016-5355 URL:http://www.openwall.com/lists/oss-security/2016/06/09/3  View
789571 92174 CVE-2016-5355 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12394  View
789572 92174 CVE-2016-5355 CONFIRM:https://github.com/wireshark/wireshark/commit/3270dfac43da861c714df76513456b46765ff47f  View
789573 92174 CVE-2016-5355 CONFIRM:https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b  View
789574 92174 CVE-2016-5355 CONFIRM:https://www.wireshark.org/security/wnpa-sec-2016-34.html  View
789575 92174 CVE-2016-5355 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
789576 92174 CVE-2016-5355 DEBIAN:DSA-3615  View
789577 92174 CVE-2016-5355 URL:http://www.debian.org/security/2016/dsa-3615  View
789578 92174 CVE-2016-5355 BID:91140  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3356 JVNDB-2016-004129 Crestron Electronics DM-TXRX-100-STR デバイスのファームウェアにおける認証を回避される脆弱性 Crestron Electronics DM-TXRX-100-STR デバイスのファームウェアには、認証を回避され、設定を変更される脆弱性が存在します。 CVE-2016-5668 92174 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004129.html  View