SUSE CVE-2016-2528

The dissectnhdrextopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...

Updated wireshark packages fix security vulnerabilities

Updated wireshark packages fix security vulnerabilities: ASN.1 BER dissector crash CVE-2016-2522. DNP dissector infinite loop CVE-2016-2523. X.509AF dissector crash CVE-2016-2524. HTTP/2 dissector crash CVE-2016-2525. HiQnet dissector crash CVE-2016-2526. 3GPP TS 32.423 Trace file parser crash...

CVE-2016-2528

CVE-2016-2528 affects the LBMC dissector in Wireshark 2.0.x prior to 2.0.2, where dissect_nhdr_extopt does not validate length values, enabling a crafted packet to trigger a stack-based buffer overflow and cause a denial of service (application crash). Publicly referenced advisories indicate reme...