CVE

Id
92175  
CVE No.
CVE-2016-5356  
Status
Candidate  
Description
wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.  
Phase
Assigned (20160609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
789579 92175 CVE-2016-5356 MLIST:[oss-security] 20160609 Re: CVE Request: wireshark releases  View
789580 92175 CVE-2016-5356 URL:http://www.openwall.com/lists/oss-security/2016/06/09/3  View
789581 92175 CVE-2016-5356 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12395  View
789582 92175 CVE-2016-5356 CONFIRM:https://github.com/wireshark/wireshark/commit/a66628e425db725df1ac52a3c573a03357060ddd  View
789583 92175 CVE-2016-5356 CONFIRM:https://github.com/wireshark/wireshark/commit/f5ec0afb766f19519ea9623152cca3bbe2229500  View
789584 92175 CVE-2016-5356 CONFIRM:https://www.wireshark.org/security/wnpa-sec-2016-35.html  View
789585 92175 CVE-2016-5356 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
789586 92175 CVE-2016-5356 DEBIAN:DSA-3615  View
789587 92175 CVE-2016-5356 URL:http://www.debian.org/security/2016/dsa-3615  View
789588 92175 CVE-2016-5356 BID:91140  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3357 JVNDB-2016-004130 Crestron Electronics DM-TXRX-100-STR デバイスのファームウェアにおける HTTPS セッションに対して中間者攻撃を実行される脆弱性 Crestron Electronics DM-TXRX-100-STR デバイスのファームウェアは、OpenSSL テスト用認証局からのハードコードされた 0xb9eed4d955a59eb3 の X.509 証明書を使用するため、HTTPS セッションに対して中間者攻撃 (man-in-the-middle attack) を実行される脆弱性が存在します。 CVE-2016-5669 92175 5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004130.html  View