3 matches found
Updated wireshark packages fix security vulnerabilities
Updated wireshark packages fix security vulnerabilities: ASN.1 BER dissector crash CVE-2016-2522. DNP dissector infinite loop CVE-2016-2523. X.509AF dissector crash CVE-2016-2524. HTTP/2 dissector crash CVE-2016-2525. HiQnet dissector crash CVE-2016-2526. 3GPP TS 32.423 Trace file parser crash...
CVE-2016-2525
epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...
CVE-2016-2525
CVE-2016-2525 affects Wireshark 2.0.x before 2.0.2, where the HTTP/2 dissector (epan/dissectors/packet-http2.c) does not limit header data, enabling remote attackers to cause a denial of service via crafted packets (memory consumption or crash). Public advisories (including Debian and Mageia) con...