CVE-2017-15345

Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot...

CVE-2017-15345

Huawei LON-L29D smartphones (models including LON-L29DC721B186) contain a denial-of-service vulnerability caused by an unexitable loop driven by crafted 3GPP messages, which can lead to device reboot. The issue is documented across multiple sources (NVD/NVD-derived records, CNVD, CVE-IDs, and Hua...

CVE-2017-15345: Uncontrolled Resource Consumption

Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot...

PT-2018-5797

Name of the Vulnerable Software and Affected Versions: Huawei Smartphones version LON-L29DC721B186 Description: The issue allows an attacker to cause a denial of service by sending a crafted 3GPP message, which could lead to the device rebooting due to an unreachable loop exit condition...

Security Advisory - Denial of Service Vulnerability on Huawei Smartphones

There is a denial of service vulnerability on Huawei Smartphones. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot. Vulnerability ID: HWPSIRT-2017-09085 This vulnerability has been assigne...

CVE-2015-2280

Affected device. AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera (firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck). Vulnerability. OS Command Injection in the snwrite.cgi binary that processes the mac parameter, enabling arbitrary command execution through system() after constructi...

CVE-2015-2280

snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FWAIC1620W1.1.0-1220120709r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter...

Apple QuickTime < 7.7.8 Multiple Vulnerabilities

Binary data 9305.prm...

wireshark-gtk: denial of service

CVE-2016-2522: The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service out-of-bounds read and application...

Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.2 advisory. - Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wiresharkapplication.cpp in...

Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.2 advisory. - Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wiresharkapplication.cpp...

Wireshark Multiple Denial-of-Service Vulnerabilities (Mar 2016) - Mac OS X

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FreeBSD : wireshark -- multiple vulnerabilities (45117749-df55-11e5-b2bd-002590263bf5)

Wireshark development team reports : The following vulnerabilities have been fixed : - wnpa-sec-2016-02 ASN.1 BER dissector crash. Bug 11828 CVE-2016-2522 - wnpa-sec-2016-03 DNP dissector infinite loop. Bug 11938 CVE-2016-2523 - wnpa-sec-2016-04 X.509AF dissector crash. Bug 12002 CVE-2016-2524 -...

CVE-2016-2527

wiretap/nettrace3gpp32423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a...

CVE-2016-2527

wiretap/nettrace3gpp32423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a...

Stack overflow

wiretap/nettrace3gpp32423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a...

CVE-2016-2527

Wireshark 2.0.x before 2.0.2 is affected by CVE-2016-2527 in the 3GPP TS 32.423 Trace file parser (wiretap/nettrace_3gpp_32_423.c). The vulnerability arises because the parser does not ensure a trailing null ('\0') at the end of certain strings, enabling remote attackers to trigger a stack-based ...

CVE-2016-2527

wiretap/nettrace3gpp32423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a...

CVE-2016-2527

wiretap/nettrace3gpp32423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a...

CVE-2016-2527

wiretap/nettrace3gpp32423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a...