CVE-2019-9352

CVE-2019-9352 affects the Android Media framework (libstagefright) on Android 10, where a missing bounds check can cause resource exhaustion and remote denial of service. The issue requires user interaction to exploit and is reported as a DoS with an impact to availability. Root cause: insufficie...

CVE-2015-9352

The CVE-2015-9352 entry concerns the WordPress WP-Polls plugin prior to version 2.72, which contains an SQL injection flaw due to lack of validation of externally supplied SQL statements in database operations. Affected component: WP-Polls plugin for WordPress. Root cause: unsafely constructed SQ...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:1663-1)

The network debugging tool wireshark was updated to version 2.2.7 to fix the following issues : - CVE-2017-9352: Bazaar dissector infinite loop wnpa-sec-2017-22 bsc1042304 - CVE-2017-9348: DOF dissector read overflow wnpa-sec-2017-23 bsc1042303 - CVE-2017-9351: DHCP dissector read overflow...

SUSE SLES11 Security Update : wireshark (SUSE-SU-2017:1664-1)

The network analysis tool wireshark was updated to version 2.0.13 to fix the following issues : - CVE-2017-9352: Bazaar dissector infinite loop wnpa-sec-2017-22 bsc1042304 - CVE-2017-9348: DOF dissector read overflow wnpa-sec-2017-23 bsc1042303 - CVE-2017-9351: DHCP dissector read overflow...

Security fix for the ALT Linux 9 package wireshark version 2.2.7-alt1

June 4, 2017 Anton Farygin 2.2.7-alt1 - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read overflow CVE-2017-9351 wnpa-sec-2017-25 SoulSeek dissector...

Security fix for the ALT Linux 7 package wireshark version 2.2.7-alt1.M70P.1

2.2.7-alt1.M70P.1 built June 4, 2017 Anton Farygin in task 183813 June 4, 2017 Anton Farygin - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read...

CVE-2017-9352

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by ensuring that backwards parsing cannot occur...

CVE-2017-9352

Wireshark CVE-2017-9352 affects the Bazaar (bzr) dissector: versions 2.2.0–2.2.6 and 2.0.0–2.0.12 can enter an infinite loop due to backwards parsing in epan/dissectors/packet-bzr.c. The fix was implemented by ensuring that backward parsing cannot occur. Technical details: affected products/versi...

Wireshark Multiple Denial-of-Service Vulnerabilities-01 (Jun 2017) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

CVE-2016-9352

...

CVE-2014-9352

CVE-2014-9352 affects Scalix Web Access (mail administration login panel) with XXE and XSS vulnerabilities disclosed across multiple databases. OpenVAS describes XXE and XSS in Scalix Web Access <= 11.4.6.12377 and <= 12.x