pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
a538f1e924
vuln-list-alt/oval/p11/ALT-PU-2016-1621/definitions.json
pepelyaevip 9d72b75f75 ALT Vulnerability
2024-12-12 21:07:30 +00:00

220 lines
9.7 KiB
JSON
Raw Blame History

{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20161621",
"Version": "oval:org.altlinux.errata:def:20161621",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2016-1621: package `wireshark` update to version 2.0.4-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p11"
],
"Products": [
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2016-1621",
"RefURL": "https://errata.altlinux.org/ALT-PU-2016-1621",
"Source": "ALTPU"
},
{
"RefID": "CVE-2016-5350",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-5350",
"Source": "CVE"
},
{
"RefID": "CVE-2016-5351",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-5351",
"Source": "CVE"
},
{
"RefID": "CVE-2016-5352",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-5352",
"Source": "CVE"
},
{
"RefID": "CVE-2016-5353",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-5353",
"Source": "CVE"
},
{
"RefID": "CVE-2016-5354",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-5354",
"Source": "CVE"
},
{
"RefID": "CVE-2016-5355",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-5355",
"Source": "CVE"
},
{
"RefID": "CVE-2016-5356",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-5356",
"Source": "CVE"
},
{
"RefID": "CVE-2016-5357",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-5357",
"Source": "CVE"
},
{
"RefID": "CVE-2016-5358",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-5358",
"Source": "CVE"
}
],
"Description": "This update upgrades wireshark to version 2.0.4-alt1. \nSecurity Fix(es):\n\n * CVE-2016-5350: epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.\n\n * CVE-2016-5351: epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.\n\n * CVE-2016-5352: epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.\n\n * CVE-2016-5353: epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.\n\n * CVE-2016-5354: The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.\n\n * CVE-2016-5355: wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.\n\n * CVE-2016-5356: wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.\n\n * CVE-2016-5357: wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.\n\n * CVE-2016-5358: epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2016-06-16"
},
"Updated": {
"Date": "2016-06-16"
},
"BDUs": null,
"CVEs": [
{
"ID": "CVE-2016-5350",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-399",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-5350",
"Impact": "High",
"Public": "20160807"
},
{
"ID": "CVE-2016-5351",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-20",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-5351",
"Impact": "Low",
"Public": "20160807"
},
{
"ID": "CVE-2016-5352",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-5352",
"Impact": "Low",
"Public": "20160807"
},
{
"ID": "CVE-2016-5353",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-20",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-5353",
"Impact": "Low",
"Public": "20160807"
},
{
"ID": "CVE-2016-5354",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-476",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-5354",
"Impact": "Low",
"Public": "20160807"
},
{
"ID": "CVE-2016-5355",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-20",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-5355",
"Impact": "Low",
"Public": "20160807"
},
{
"ID": "CVE-2016-5356",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-119",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-5356",
"Impact": "Low",
"Public": "20160807"
},
{
"ID": "CVE-2016-5357",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-20",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-5357",
"Impact": "Low",
"Public": "20160807"
},
{
"ID": "CVE-2016-5358",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-20",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-5358",
"Impact": "Low",
"Public": "20160807"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:container:11"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20161621001",
"Comment": "libwiretap is earlier than 0:2.0.4-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20161621002",
"Comment": "libwiretap-devel is earlier than 0:2.0.4-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20161621003",
"Comment": "tshark is earlier than 0:2.0.4-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20161621004",
"Comment": "wireshark-base is earlier than 0:2.0.4-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20161621005",
"Comment": "wireshark-doc is earlier than 0:2.0.4-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20161621006",
"Comment": "wireshark-gtk+ is earlier than 0:2.0.4-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20161621007",
"Comment": "wireshark-qt5 is earlier than 0:2.0.4-alt1"
}
]
}
]
}
}
]
}
Reference in New Issue View Git Blame Copy Permalink