EUVD-2016-3607

Malware in sbrugna...

wireshark-gtk: denial of service

CVE-2016-2522: The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service out-of-bounds read and application...

CVE-2016-2529

The iseriescheckfiletype function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL" substring, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a craft...

PT-2016-5187

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.x through 2.0.1 Description The issue is related to the iSeries file parser in Wireshark, where the iseries check file type function does not properly handle lines lacking the "OBJECT PROTOCOL" substring. This can be...