EUVD-2016-3602

Malware in sbrugna...

wireshark-gtk: denial of service

CVE-2016-2522: The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service out-of-bounds read and application...

CVE-2016-2524

epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PT-2016-5182

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.x through 2.0.1 Description The issue is related to the X.509AF dissector in Wireshark, where it mishandles the algorithm ID. This allows remote attackers to cause a denial of service, resulting in an application crash,...