CVE-2017-6468

CVE-2017-6468 affects Wireshark 2.2.0–2.2.4 and 2.0.0–2.0.10, caused by a NetScaler file parser crash triggered by a malformed capture file. The root cause is in wiretap/netscaler.c where the parser previously failed to validate the relationship between pages and records, allowing a crash. The fi...

CVE-2017-6474

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes...

CVE-2017-6468

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records...

CVE-2017-6467

CVE-2017-6467 affects Wireshark 2.2.0–2.2.4 and 2.0.0–2.0.10 due to a Netscaler file parser infinite loop triggered by a malformed capture file. The root cause is in wiretap/netscaler.c, where file size restrictions were tightened to address the issue. The vulnerability is cataloged in Debian/DSA...

CVE-2017-6474

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes...

CVE-2017-6467

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size...

CVE-2017-6467

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size...

CVE-2017-6468

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records...

CVE-2017-6473

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets...

CVE-2017-6474

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes...

CVE-2017-6467: Loop with Unreachable Exit Condition

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size...

CVE-2017-6473: Improper Input Validation

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets...

PT-2017-17087

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.10 Wireshark versions 2.2.0 through 2.2.4 Description The issue is related to a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed by changing the restrictions on...

PT-2017-17094

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.10 Wireshark versions 2.2.0 through 2.2.4 Description The issue is related to an infinite loop in the NetScaler file parser, triggered by a malformed capture file. This was addressed by validating record...

PT-2017-17093

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.10 Wireshark versions 2.2.0 through 2.2.4 Description The issue is related to a crash of the K12 file parser, triggered by a malformed capture file. This was addressed by validating the relationships betwee...

Ubuntu 14.04 LTS / 16.04 LTS : Apport vulnerabilities (USN-3157-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3157-1 advisory. Donncha O Cearbhaill discovered that the crash file parser in Apport improperly treated the CrashDB field as python code. An attacker could u...

Ubuntu: Security Advisory (USN-3157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Symantec Decomposer Engine Security Update

SUMMARY Symantec has released an update to address two issues in the RAR file parser component of the antivirus decomposer engine used by multiple Symantec products. Parsing of maliciously formatted RAR container files may cause an application-level denial of service condition. AFFECTED PRODUCTS...

Apache OpenOffice -- multiple vulnerabilities

The Apache Openofffice project reports: CVE-2017-3157: Arbitrary file disclosure in Calc and Writer By exploiting the way OpenOffice renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacke...

CVE-2016-5357

wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service application crash via a crafted file...