CVE

Id
93332  
CVE No.
CVE-2016-6512  
Status
Candidate  
Description
epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors.  
Phase
Assigned (20160801)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793507 93332 CVE-2016-6512 MLIST:[oss-security] 20160728 CVE request: Wireshark 2.0.5 and 1.12.13 security releases  View
793508 93332 CVE-2016-6512 URL:http://openwall.com/lists/oss-security/2016/07/28/3  View
793509 93332 CVE-2016-6512 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2016-48.html  View
793510 93332 CVE-2016-6512 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12661  View
793511 93332 CVE-2016-6512 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2193bea3212d74e2a907152055e27d409b59485e  View
793512 93332 CVE-2016-6512 BID:92174  View
793513 93332 CVE-2016-6512 URL:http://www.securityfocus.com/bid/92174  View
793514 93332 CVE-2016-6512 SECTRACK:1036480  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3788 JVNDB-2016-004561 複数の Huawei 製品のソフトウェアにおけるパスワードを取得される脆弱性 複数の Huawei 製品のソフトウェアには、"認証保護メカニズムの欠落" に関する処理に不備があるため、パスワードを取得される脆弱性が存在します。 CVE-2016-6825 93332 5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004561.html  View