csaf_opensuse - opensuse-su-2020:0362-1

opensuse-su-2020:0362-1

Vulnerability from csaf_opensuse

Published

2020-03-19 19:19

Modified

2020-03-19 19:19

Summary

Security update for wireshark

Notes

Title of the patch

Security update for wireshark

Description of the patch

This update for wireshark and libmaxminddb fixes the following issues: Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288). New features include: - Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC - Improved support for existing protocols, like HTTP/2 - Improved analytics and usability functionalities This update was imported from the SUSE:SLE-15:Update update project.

Patchnames

openSUSE-2020-362

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wireshark",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wireshark and libmaxminddb fixes the following issues:\n\nUpdate wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).\n\nNew features include:\n\n- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC\n- Improved support for existing protocols, like HTTP/2\n- Improved analytics and usability functionalities\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-362",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0362-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:0362-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5IUFGOOBYOJSD6ELATYP2KAV4TMLYPWB/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:0362-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5IUFGOOBYOJSD6ELATYP2KAV4TMLYPWB/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1093733",
        "url": "https://bugzilla.suse.com/1093733"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1094301",
        "url": "https://bugzilla.suse.com/1094301"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101776",
        "url": "https://bugzilla.suse.com/1101776"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101777",
        "url": "https://bugzilla.suse.com/1101777"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101786",
        "url": "https://bugzilla.suse.com/1101786"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101788",
        "url": "https://bugzilla.suse.com/1101788"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101791",
        "url": "https://bugzilla.suse.com/1101791"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101794",
        "url": "https://bugzilla.suse.com/1101794"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101800",
        "url": "https://bugzilla.suse.com/1101800"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101802",
        "url": "https://bugzilla.suse.com/1101802"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101804",
        "url": "https://bugzilla.suse.com/1101804"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101810",
        "url": "https://bugzilla.suse.com/1101810"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106514",
        "url": "https://bugzilla.suse.com/1106514"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1111647",
        "url": "https://bugzilla.suse.com/1111647"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117740",
        "url": "https://bugzilla.suse.com/1117740"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121231",
        "url": "https://bugzilla.suse.com/1121231"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121232",
        "url": "https://bugzilla.suse.com/1121232"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121233",
        "url": "https://bugzilla.suse.com/1121233"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121234",
        "url": "https://bugzilla.suse.com/1121234"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121235",
        "url": "https://bugzilla.suse.com/1121235"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127367",
        "url": "https://bugzilla.suse.com/1127367"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127369",
        "url": "https://bugzilla.suse.com/1127369"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127370",
        "url": "https://bugzilla.suse.com/1127370"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131941",
        "url": "https://bugzilla.suse.com/1131941"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131945",
        "url": "https://bugzilla.suse.com/1131945"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136021",
        "url": "https://bugzilla.suse.com/1136021"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1141980",
        "url": "https://bugzilla.suse.com/1141980"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150690",
        "url": "https://bugzilla.suse.com/1150690"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156288",
        "url": "https://bugzilla.suse.com/1156288"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1158505",
        "url": "https://bugzilla.suse.com/1158505"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1161052",
        "url": "https://bugzilla.suse.com/1161052"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165241",
        "url": "https://bugzilla.suse.com/1165241"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165710",
        "url": "https://bugzilla.suse.com/1165710"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 957624",
        "url": "https://bugzilla.suse.com/957624"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11354 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11354/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11355 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11355/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11356 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11356/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11357 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11357/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11358 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11358/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11359 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11359/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11360 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11360/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11361 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11361/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11362 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11362/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-12086 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-12086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14339 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14339/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14340 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14340/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14341 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14341/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14342 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14342/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14343 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14343/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14344 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14344/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14367 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14367/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14368 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14368/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14369 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14369/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14370 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14370/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16056 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16056/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16057 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16057/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16058 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16058/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18225 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18225/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18226 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18226/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18227 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18227/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19622 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19622/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19623 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19623/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19624 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19624/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19625 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19625/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19626 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19626/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19627 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19627/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19628 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19628/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10894 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10894/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10895 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10895/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10896 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10896/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10897 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10897/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10898 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10898/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10899 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10899/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10900 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10900/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10901 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10901/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10902 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10902/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10903 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10903/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13619 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13619/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16319 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16319/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19553 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19553/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5716 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5717 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5717/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5718 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5719 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5721 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5721/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9208 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9208/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9209 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9209/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9214 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9214/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-7044 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-7044/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-9428 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-9428/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-9429 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-9429/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-9430 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-9430/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-9431 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-9431/"
      }
    ],
    "title": "Security update for wireshark",
    "tracking": {
      "current_release_date": "2020-03-19T19:19:35Z",
      "generator": {
        "date": "2020-03-19T19:19:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:0362-1",
      "initial_release_date": "2020-03-19T19:19:35Z",
      "revision_history": [
        {
          "date": "2020-03-19T19:19:35Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
                "product": {
                  "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
                  "product_id": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libmaxminddb0-1.4.2-lp151.3.3.1.i586",
                "product": {
                  "name": "libmaxminddb0-1.4.2-lp151.3.3.1.i586",
                  "product_id": "libmaxminddb0-1.4.2-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libspandsp2-0.0.6-lp151.3.3.1.i586",
                "product": {
                  "name": "libspandsp2-0.0.6-lp151.3.3.1.i586",
                  "product_id": "libspandsp2-0.0.6-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libwireshark13-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "libwireshark13-3.2.2-lp151.2.9.1.i586",
                  "product_id": "libwireshark13-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libwiretap10-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "libwiretap10-3.2.2-lp151.2.9.1.i586",
                  "product_id": "libwiretap10-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libwsutil11-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "libwsutil11-3.2.2-lp151.2.9.1.i586",
                  "product_id": "libwsutil11-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "mmdblookup-1.4.2-lp151.3.3.1.i586",
                "product": {
                  "name": "mmdblookup-1.4.2-lp151.3.3.1.i586",
                  "product_id": "mmdblookup-1.4.2-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "spandsp-devel-0.0.6-lp151.3.3.1.i586",
                "product": {
                  "name": "spandsp-devel-0.0.6-lp151.3.3.1.i586",
                  "product_id": "spandsp-devel-0.0.6-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "wireshark-3.2.2-lp151.2.9.1.i586",
                  "product_id": "wireshark-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-devel-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "wireshark-devel-3.2.2-lp151.2.9.1.i586",
                  "product_id": "wireshark-devel-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
                  "product_id": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "spandsp-doc-0.0.6-lp151.3.3.1.noarch",
                "product": {
                  "name": "spandsp-doc-0.0.6-lp151.3.3.1.noarch",
                  "product_id": "spandsp-doc-0.0.6-lp151.3.3.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
                  "product_id": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
                  "product_id": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
                  "product_id": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libspandsp2-0.0.6-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libspandsp2-0.0.6-lp151.3.3.1.x86_64",
                  "product_id": "libspandsp2-0.0.6-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
                  "product_id": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwireshark13-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "libwireshark13-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "libwireshark13-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwiretap10-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "libwiretap10-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "libwiretap10-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwsutil11-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "libwsutil11-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "libwsutil11-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mmdblookup-1.4.2-lp151.3.3.1.x86_64",
                "product": {
                  "name": "mmdblookup-1.4.2-lp151.3.3.1.x86_64",
                  "product_id": "mmdblookup-1.4.2-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
                "product": {
                  "name": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
                  "product_id": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "wireshark-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "wireshark-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586"
        },
        "product_reference": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64"
        },
        "product_reference": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb0-1.4.2-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586"
        },
        "product_reference": "libmaxminddb0-1.4.2-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64"
        },
        "product_reference": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64"
        },
        "product_reference": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libspandsp2-0.0.6-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586"
        },
        "product_reference": "libspandsp2-0.0.6-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libspandsp2-0.0.6-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64"
        },
        "product_reference": "libspandsp2-0.0.6-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64"
        },
        "product_reference": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwireshark13-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "libwireshark13-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwireshark13-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "libwireshark13-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwiretap10-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "libwiretap10-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwiretap10-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "libwiretap10-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwsutil11-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "libwsutil11-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwsutil11-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "libwsutil11-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mmdblookup-1.4.2-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586"
        },
        "product_reference": "mmdblookup-1.4.2-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mmdblookup-1.4.2-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64"
        },
        "product_reference": "mmdblookup-1.4.2-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spandsp-devel-0.0.6-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586"
        },
        "product_reference": "spandsp-devel-0.0.6-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64"
        },
        "product_reference": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spandsp-doc-0.0.6-lp151.3.3.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch"
        },
        "product_reference": "spandsp-doc-0.0.6-lp151.3.3.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "wireshark-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "wireshark-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "wireshark-devel-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-11354",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11354"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11354",
          "url": "https://www.suse.com/security/cve/CVE-2018-11354"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11354",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11354"
    },
    {
      "cve": "CVE-2018-11355",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11355"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11355",
          "url": "https://www.suse.com/security/cve/CVE-2018-11355"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11355",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11355"
    },
    {
      "cve": "CVE-2018-11356",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11356"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11356",
          "url": "https://www.suse.com/security/cve/CVE-2018-11356"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11356",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11356"
    },
    {
      "cve": "CVE-2018-11357",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11357"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11357",
          "url": "https://www.suse.com/security/cve/CVE-2018-11357"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11357",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11357"
    },
    {
      "cve": "CVE-2018-11358",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11358"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11358",
          "url": "https://www.suse.com/security/cve/CVE-2018-11358"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11358",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11358"
    },
    {
      "cve": "CVE-2018-11359",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11359"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11359",
          "url": "https://www.suse.com/security/cve/CVE-2018-11359"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11359",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11359"
    },
    {
      "cve": "CVE-2018-11360",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11360"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11360",
          "url": "https://www.suse.com/security/cve/CVE-2018-11360"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11360",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11360"
    },
    {
      "cve": "CVE-2018-11361",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11361"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11361",
          "url": "https://www.suse.com/security/cve/CVE-2018-11361"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11361",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11361"
    },
    {
      "cve": "CVE-2018-11362",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11362"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing \u0027\\0\u0027 character.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11362",
          "url": "https://www.suse.com/security/cve/CVE-2018-11362"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11362",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11362"
    },
    {
      "cve": "CVE-2018-12086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-12086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-12086",
          "url": "https://www.suse.com/security/cve/CVE-2018-12086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1111647 for CVE-2018-12086",
          "url": "https://bugzilla.suse.com/1111647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-12086"
    },
    {
      "cve": "CVE-2018-14339",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14339"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14339",
          "url": "https://www.suse.com/security/cve/CVE-2018-14339"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101810 for CVE-2018-14339",
          "url": "https://bugzilla.suse.com/1101810"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14339"
    },
    {
      "cve": "CVE-2018-14340",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14340"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14340",
          "url": "https://www.suse.com/security/cve/CVE-2018-14340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101804 for CVE-2018-14340",
          "url": "https://bugzilla.suse.com/1101804"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14340"
    },
    {
      "cve": "CVE-2018-14341",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14341"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14341",
          "url": "https://www.suse.com/security/cve/CVE-2018-14341"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101776 for CVE-2018-14341",
          "url": "https://bugzilla.suse.com/1101776"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14341"
    },
    {
      "cve": "CVE-2018-14342",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14342"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14342",
          "url": "https://www.suse.com/security/cve/CVE-2018-14342"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101777 for CVE-2018-14342",
          "url": "https://bugzilla.suse.com/1101777"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14342"
    },
    {
      "cve": "CVE-2018-14343",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14343"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14343",
          "url": "https://www.suse.com/security/cve/CVE-2018-14343"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101786 for CVE-2018-14343",
          "url": "https://bugzilla.suse.com/1101786"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14343"
    },
    {
      "cve": "CVE-2018-14344",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14344"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14344",
          "url": "https://www.suse.com/security/cve/CVE-2018-14344"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101788 for CVE-2018-14344",
          "url": "https://bugzilla.suse.com/1101788"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14344"
    },
    {
      "cve": "CVE-2018-14367",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14367"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14367",
          "url": "https://www.suse.com/security/cve/CVE-2018-14367"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101791 for CVE-2018-14367",
          "url": "https://bugzilla.suse.com/1101791"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14367"
    },
    {
      "cve": "CVE-2018-14368",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14368"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14368",
          "url": "https://www.suse.com/security/cve/CVE-2018-14368"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101794 for CVE-2018-14368",
          "url": "https://bugzilla.suse.com/1101794"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14368"
    },
    {
      "cve": "CVE-2018-14369",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14369"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14369",
          "url": "https://www.suse.com/security/cve/CVE-2018-14369"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101800 for CVE-2018-14369",
          "url": "https://bugzilla.suse.com/1101800"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14369"
    },
    {
      "cve": "CVE-2018-14370",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14370"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14370",
          "url": "https://www.suse.com/security/cve/CVE-2018-14370"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101802 for CVE-2018-14370",
          "url": "https://bugzilla.suse.com/1101802"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14370"
    },
    {
      "cve": "CVE-2018-16056",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16056"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16056",
          "url": "https://www.suse.com/security/cve/CVE-2018-16056"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106514 for CVE-2018-16056",
          "url": "https://bugzilla.suse.com/1106514"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16056"
    },
    {
      "cve": "CVE-2018-16057",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16057"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16057",
          "url": "https://www.suse.com/security/cve/CVE-2018-16057"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106514 for CVE-2018-16057",
          "url": "https://bugzilla.suse.com/1106514"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16057"
    },
    {
      "cve": "CVE-2018-16058",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16058"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16058",
          "url": "https://www.suse.com/security/cve/CVE-2018-16058"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106514 for CVE-2018-16058",
          "url": "https://bugzilla.suse.com/1106514"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16058"
    },
    {
      "cve": "CVE-2018-18225",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18225"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18225",
          "url": "https://www.suse.com/security/cve/CVE-2018-18225"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1111647 for CVE-2018-18225",
          "url": "https://bugzilla.suse.com/1111647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-18225"
    },
    {
      "cve": "CVE-2018-18226",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18226"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18226",
          "url": "https://www.suse.com/security/cve/CVE-2018-18226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1111647 for CVE-2018-18226",
          "url": "https://bugzilla.suse.com/1111647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-18226"
    },
    {
      "cve": "CVE-2018-18227",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18227"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18227",
          "url": "https://www.suse.com/security/cve/CVE-2018-18227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1111647 for CVE-2018-18227",
          "url": "https://bugzilla.suse.com/1111647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-18227"
    },
    {
      "cve": "CVE-2018-19622",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19622"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19622",
          "url": "https://www.suse.com/security/cve/CVE-2018-19622"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19622",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19622"
    },
    {
      "cve": "CVE-2018-19623",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19623"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19623",
          "url": "https://www.suse.com/security/cve/CVE-2018-19623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19623",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19623"
    },
    {
      "cve": "CVE-2018-19624",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19624"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19624",
          "url": "https://www.suse.com/security/cve/CVE-2018-19624"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19624",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19624"
    },
    {
      "cve": "CVE-2018-19625",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19625"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19625",
          "url": "https://www.suse.com/security/cve/CVE-2018-19625"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19625",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19625"
    },
    {
      "cve": "CVE-2018-19626",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19626"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding \u0027\\0\u0027 termination.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19626",
          "url": "https://www.suse.com/security/cve/CVE-2018-19626"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19626",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19626"
    },
    {
      "cve": "CVE-2018-19627",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19627"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19627",
          "url": "https://www.suse.com/security/cve/CVE-2018-19627"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19627",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19627"
    },
    {
      "cve": "CVE-2018-19628",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19628"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19628",
          "url": "https://www.suse.com/security/cve/CVE-2018-19628"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19628",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-19628"
    },
    {
      "cve": "CVE-2019-10894",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10894"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10894",
          "url": "https://www.suse.com/security/cve/CVE-2019-10894"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10894",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10894",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10894",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10894"
    },
    {
      "cve": "CVE-2019-10895",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10895"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10895",
          "url": "https://www.suse.com/security/cve/CVE-2019-10895"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10895",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10895",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10895",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10895"
    },
    {
      "cve": "CVE-2019-10896",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10896"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10896",
          "url": "https://www.suse.com/security/cve/CVE-2019-10896"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10896",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10896",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10896",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10896"
    },
    {
      "cve": "CVE-2019-10897",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10897"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10897",
          "url": "https://www.suse.com/security/cve/CVE-2019-10897"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10897",
          "url": "https://bugzilla.suse.com/1131941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10897"
    },
    {
      "cve": "CVE-2019-10898",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10898"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10898",
          "url": "https://www.suse.com/security/cve/CVE-2019-10898"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10898",
          "url": "https://bugzilla.suse.com/1131941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10898"
    },
    {
      "cve": "CVE-2019-10899",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10899"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10899",
          "url": "https://www.suse.com/security/cve/CVE-2019-10899"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10899",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10899",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10899",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10899"
    },
    {
      "cve": "CVE-2019-10900",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10900"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10900",
          "url": "https://www.suse.com/security/cve/CVE-2019-10900"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10900",
          "url": "https://bugzilla.suse.com/1131941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10900"
    },
    {
      "cve": "CVE-2019-10901",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10901"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10901",
          "url": "https://www.suse.com/security/cve/CVE-2019-10901"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10901",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10901",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10901",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10901"
    },
    {
      "cve": "CVE-2019-10902",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10902"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10902",
          "url": "https://www.suse.com/security/cve/CVE-2019-10902"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10902",
          "url": "https://bugzilla.suse.com/1131941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10902"
    },
    {
      "cve": "CVE-2019-10903",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10903"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10903",
          "url": "https://www.suse.com/security/cve/CVE-2019-10903"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10903",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10903",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10903",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10903"
    },
    {
      "cve": "CVE-2019-13619",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13619"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13619",
          "url": "https://www.suse.com/security/cve/CVE-2019-13619"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141980 for CVE-2019-13619",
          "url": "https://bugzilla.suse.com/1141980"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13619"
    },
    {
      "cve": "CVE-2019-16319",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16319"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16319",
          "url": "https://www.suse.com/security/cve/CVE-2019-16319"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150690 for CVE-2019-16319",
          "url": "https://bugzilla.suse.com/1150690"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16319"
    },
    {
      "cve": "CVE-2019-19553",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19553"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19553",
          "url": "https://www.suse.com/security/cve/CVE-2019-19553"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158505 for CVE-2019-19553",
          "url": "https://bugzilla.suse.com/1158505"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19553"
    },
    {
      "cve": "CVE-2019-5716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5716",
          "url": "https://www.suse.com/security/cve/CVE-2019-5716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121231 for CVE-2019-5716",
          "url": "https://bugzilla.suse.com/1121231"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5716"
    },
    {
      "cve": "CVE-2019-5717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5717",
          "url": "https://www.suse.com/security/cve/CVE-2019-5717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121232 for CVE-2019-5717",
          "url": "https://bugzilla.suse.com/1121232"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5717"
    },
    {
      "cve": "CVE-2019-5718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5718",
          "url": "https://www.suse.com/security/cve/CVE-2019-5718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121233 for CVE-2019-5718",
          "url": "https://bugzilla.suse.com/1121233"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5718"
    },
    {
      "cve": "CVE-2019-5719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5719",
          "url": "https://www.suse.com/security/cve/CVE-2019-5719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121234 for CVE-2019-5719",
          "url": "https://bugzilla.suse.com/1121234"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5719"
    },
    {
      "cve": "CVE-2019-5721",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5721"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5721",
          "url": "https://www.suse.com/security/cve/CVE-2019-5721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121235 for CVE-2019-5721",
          "url": "https://bugzilla.suse.com/1121235"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5721"
    },
    {
      "cve": "CVE-2019-9208",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9208"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9208",
          "url": "https://www.suse.com/security/cve/CVE-2019-9208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127370 for CVE-2019-9208",
          "url": "https://bugzilla.suse.com/1127370"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9208"
    },
    {
      "cve": "CVE-2019-9209",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9209"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9209",
          "url": "https://www.suse.com/security/cve/CVE-2019-9209"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127369 for CVE-2019-9209",
          "url": "https://bugzilla.suse.com/1127369"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9209"
    },
    {
      "cve": "CVE-2019-9214",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9214"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9214",
          "url": "https://www.suse.com/security/cve/CVE-2019-9214"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127367 for CVE-2019-9214",
          "url": "https://bugzilla.suse.com/1127367"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9214"
    },
    {
      "cve": "CVE-2020-7044",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-7044"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using \u003e= and \u003c= to resolve off-by-one errors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-7044",
          "url": "https://www.suse.com/security/cve/CVE-2020-7044"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161052 for CVE-2020-7044",
          "url": "https://bugzilla.suse.com/1161052"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-7044"
    },
    {
      "cve": "CVE-2020-9428",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-9428"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-9428",
          "url": "https://www.suse.com/security/cve/CVE-2020-9428"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165241 for CVE-2020-9428",
          "url": "https://bugzilla.suse.com/1165241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-9428"
    },
    {
      "cve": "CVE-2020-9429",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-9429"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-9429",
          "url": "https://www.suse.com/security/cve/CVE-2020-9429"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165241 for CVE-2020-9429",
          "url": "https://bugzilla.suse.com/1165241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-9429"
    },
    {
      "cve": "CVE-2020-9430",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-9430"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-9430",
          "url": "https://www.suse.com/security/cve/CVE-2020-9430"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165241 for CVE-2020-9430",
          "url": "https://bugzilla.suse.com/1165241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-9430"
    },
    {
      "cve": "CVE-2020-9431",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-9431"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-9431",
          "url": "https://www.suse.com/security/cve/CVE-2020-9431"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165241 for CVE-2020-9431",
          "url": "https://bugzilla.suse.com/1165241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-9431"
    }
  ]
}

CVE-2018-11359 (GCVE-0-2018-11359)

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

CWE

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference.

References

URL

Tags

	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beaebe91b14564fb9f86f0726bab09927872721b	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-33.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.501Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beaebe91b14564fb9f86f0726bab09927872721b"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-33.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:06",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beaebe91b14564fb9f86f0726bab09927872721b"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-33.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11359",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=beaebe91b14564fb9f86f0726bab09927872721b",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=beaebe91b14564fb9f86f0726bab09927872721b"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-33.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-33.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11359",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.501Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14369 (GCVE-0-2018-14369)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:29

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression.

References

URL

Tags

	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=038cd225bfa54e2a7ade4043118796334920a61e	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-41.html	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:50.595Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=038cd225bfa54e2a7ade4043118796334920a61e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-41.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:07",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=038cd225bfa54e2a7ade4043118796334920a61e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-41.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14369",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=038cd225bfa54e2a7ade4043118796334920a61e",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=038cd225bfa54e2a7ade4043118796334920a61e"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-41.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-41.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14369",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:29:50.595Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-18227 (GCVE-0-2018-18227)

Vulnerability from cvelistv5

Published

2018-10-12 05:00

Modified

2024-08-05 11:01

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2018-47.html	x_refsource_MISC
	http://www.securitytracker.com/id/1041909	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/105583	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d443be449a52f95df5754adc39e1f3472fec2f03	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:15.123Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-47.html"
          },
          {
            "name": "1041909",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041909"
          },
          {
            "name": "105583",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105583"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d443be449a52f95df5754adc39e1f3472fec2f03"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:44",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-47.html"
        },
        {
          "name": "1041909",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041909"
        },
        {
          "name": "105583",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105583"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d443be449a52f95df5754adc39e1f3472fec2f03"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-18227",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-47.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-47.html"
            },
            {
              "name": "1041909",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041909"
            },
            {
              "name": "105583",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105583"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=d443be449a52f95df5754adc39e1f3472fec2f03",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=d443be449a52f95df5754adc39e1f3472fec2f03"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-18227",
    "datePublished": "2018-10-12T05:00:00",
    "dateReserved": "2018-10-10T00:00:00",
    "dateUpdated": "2024-08-05T11:01:15.123Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16057 (GCVE-0-2018-16057)

Vulnerability from cvelistv5

Published

2018-08-30 01:00

Modified

2024-08-05 10:10

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations.

References

URL

Tags

	https://www.debian.org/security/2018/dsa-4315	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/105174	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041609	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://www.wireshark.org/security/wnpa-sec-2018-46.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bbf46eb46ae38392af8e6cd288795f0def50a621	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:10:06.054Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4315",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4315"
          },
          {
            "name": "105174",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105174"
          },
          {
            "name": "1041609",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041609"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-46.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bbf46eb46ae38392af8e6cd288795f0def50a621"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-07T18:17:25",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4315",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4315"
        },
        {
          "name": "105174",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105174"
        },
        {
          "name": "1041609",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041609"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-46.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bbf46eb46ae38392af8e6cd288795f0def50a621"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16057",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4315",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4315"
            },
            {
              "name": "105174",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105174"
            },
            {
              "name": "1041609",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041609"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-46.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-46.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bbf46eb46ae38392af8e6cd288795f0def50a621",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bbf46eb46ae38392af8e6cd288795f0def50a621"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16057",
    "datePublished": "2018-08-30T01:00:00",
    "dateReserved": "2018-08-28T00:00:00",
    "dateUpdated": "2024-08-05T10:10:06.054Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-11357 (GCVE-0-2018-11357)

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

CWE

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths.

References

URL

Tags

	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ab8a33ef083b9732c89117747a83a905a676faf6	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-28.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.286Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ab8a33ef083b9732c89117747a83a905a676faf6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-28.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:42",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ab8a33ef083b9732c89117747a83a905a676faf6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-28.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11357",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=ab8a33ef083b9732c89117747a83a905a676faf6",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=ab8a33ef083b9732c89117747a83a905a676faf6"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-28.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-28.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11357",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.286Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14368 (GCVE-0-2018-14368)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:29

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-40.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c44312f465014eb409d766a9828b7f101f6251c	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:50.145Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-40.html"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c44312f465014eb409d766a9828b7f101f6251c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:31",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-40.html"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c44312f465014eb409d766a9828b7f101f6251c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14368",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-40.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-40.html"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6c44312f465014eb409d766a9828b7f101f6251c",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6c44312f465014eb409d766a9828b7f101f6251c"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14368",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:29:50.145Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10899 (GCVE-0-2019-10899)

Vulnerability from cvelistv5

Published

2019-04-09 03:52

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-10.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b16fea2f175a3297edac118c8844c7987d31c1cb	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-10.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b16fea2f175a3297edac118c8844c7987d31c1cb"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:09",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-10.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b16fea2f175a3297edac118c8844c7987d31c1cb"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10899",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-10.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-10.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b16fea2f175a3297edac118c8844c7987d31c1cb",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b16fea2f175a3297edac118c8844c7987d31c1cb"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10899",
    "datePublished": "2019-04-09T03:52:41",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19553 (GCVE-0-2019-19553)

Vulnerability from cvelistv5

Published

2019-12-05 00:58

Modified

2024-08-05 02:16

Severity ?

CWE

Summary

In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-22.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=34d2e0d5318d0a7e9889498c721639e5cbf4ce45	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:16:48.185Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-22.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=34d2e0d5318d0a7e9889498c721639e5cbf4ce45"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:41",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-22.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=34d2e0d5318d0a7e9889498c721639e5cbf4ce45"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19553",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-22.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-22.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=34d2e0d5318d0a7e9889498c721639e5cbf4ce45",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=34d2e0d5318d0a7e9889498c721639e5cbf4ce45"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19553",
    "datePublished": "2019-12-05T00:58:37",
    "dateReserved": "2019-12-04T00:00:00",
    "dateUpdated": "2024-08-05T02:16:48.185Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9209 (GCVE-0-2019-9209)

Vulnerability from cvelistv5

Published

2019-02-28 04:00

Modified

2024-08-04 21:38

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.

References

URL

Tags

	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b	x_refsource_MISC
	http://www.securityfocus.com/bid/107203	vdb-entry, x_refsource_BID
	https://www.wireshark.org/security/wnpa-sec-2019-06.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:38:46.552Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b"
          },
          {
            "name": "107203",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107203"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-06.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "[debian-lts-announce] 20190325 [SECURITY] [DLA 1729-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html"
          },
          {
            "name": "openSUSE-SU-2019:1108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:34",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b"
        },
        {
          "name": "107203",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107203"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-06.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "[debian-lts-announce] 20190325 [SECURITY] [DLA 1729-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html"
        },
        {
          "name": "openSUSE-SU-2019:1108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-9209",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b"
            },
            {
              "name": "107203",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107203"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-06.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-06.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "[debian-lts-announce] 20190325 [SECURITY] [DLA 1729-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html"
            },
            {
              "name": "openSUSE-SU-2019:1108",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-9209",
    "datePublished": "2019-02-28T04:00:00",
    "dateReserved": "2019-02-26T00:00:00",
    "dateUpdated": "2024-08-04T21:38:46.552Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-11362 (GCVE-0-2018-11362)

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

CWE

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character.

References

URL

Tags

	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4217	vendor-advisory, x_refsource_DEBIAN
	https://www.wireshark.org/security/wnpa-sec-2018-25.html	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f177008b04a530640de835ca878892e58b826d58	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.316Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615"
          },
          {
            "name": "DSA-4217",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-25.html"
          },
          {
            "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f177008b04a530640de835ca878892e58b826d58"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing \u0027\\0\u0027 character."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:10",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615"
        },
        {
          "name": "DSA-4217",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-25.html"
        },
        {
          "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f177008b04a530640de835ca878892e58b826d58"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11362",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing \u0027\\0\u0027 character."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615"
            },
            {
              "name": "DSA-4217",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4217"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-25.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-25.html"
            },
            {
              "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f177008b04a530640de835ca878892e58b826d58",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f177008b04a530640de835ca878892e58b826d58"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11362",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.316Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-11354 (GCVE-0-2018-11354)

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

CWE

Summary

In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling.

References

URL

Tags

	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://www.wireshark.org/security/wnpa-sec-2018-26.html	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cb517a4a434387e74a2f75ebb106ee3c3893251c	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.371Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-26.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cb517a4a434387e74a2f75ebb106ee3c3893251c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:23",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-26.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cb517a4a434387e74a2f75ebb106ee3c3893251c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11354",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-26.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-26.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cb517a4a434387e74a2f75ebb106ee3c3893251c",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cb517a4a434387e74a2f75ebb106ee3c3893251c"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11354",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.371Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-11356 (GCVE-0-2018-11356)

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

CWE

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-29.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4425716ddba99374749bd033d9bc0f4add2fb973	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.316Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-29.html"
          },
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4425716ddba99374749bd033d9bc0f4add2fb973"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:28",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-29.html"
        },
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4425716ddba99374749bd033d9bc0f4add2fb973"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11356",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-29.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-29.html"
            },
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4425716ddba99374749bd033d9bc0f4add2fb973",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4425716ddba99374749bd033d9bc0f4add2fb973"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11356",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.316Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14341 (GCVE-0-2018-14341)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow.

References

URL

Tags

	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://www.wireshark.org/security/wnpa-sec-2018-39.html	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e716c32be6aa20e1813b0002878853e71f8b2f4	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.619Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-39.html"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e716c32be6aa20e1813b0002878853e71f8b2f4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:44",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-39.html"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e716c32be6aa20e1813b0002878853e71f8b2f4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14341",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-39.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-39.html"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2e716c32be6aa20e1813b0002878853e71f8b2f4",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2e716c32be6aa20e1813b0002878853e71f8b2f4"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14341",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.619Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14343 (GCVE-0-2018-14343)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer.

References

URL

Tags

	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9402f2f80c6bc7d25178a0875c5a1f5ee36361db	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://www.wireshark.org/security/wnpa-sec-2018-37.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.605Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9402f2f80c6bc7d25178a0875c5a1f5ee36361db"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-37.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:28",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9402f2f80c6bc7d25178a0875c5a1f5ee36361db"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-37.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14343",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9402f2f80c6bc7d25178a0875c5a1f5ee36361db",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9402f2f80c6bc7d25178a0875c5a1f5ee36361db"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-37.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-37.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14343",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.605Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10896 (GCVE-0-2019-10896)

Vulnerability from cvelistv5

Published

2019-04-09 03:50

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-15.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=441b6d9071d6341e58dfe10719375489c5b8e3f0	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.129Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-15.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=441b6d9071d6341e58dfe10719375489c5b8e3f0"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:08",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-15.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=441b6d9071d6341e58dfe10719375489c5b8e3f0"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10896",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-15.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-15.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=441b6d9071d6341e58dfe10719375489c5b8e3f0",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=441b6d9071d6341e58dfe10719375489c5b8e3f0"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10896",
    "datePublished": "2019-04-09T03:50:58",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9214 (GCVE-0-2019-9214)

Vulnerability from cvelistv5

Published

2019-02-28 04:00

Modified

2024-08-04 21:38

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-08.html	x_refsource_MISC
	http://www.securityfocus.com/bid/107203	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c557bb0910be271e49563756411a690a1bc53ce5	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:38:46.551Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-08.html"
          },
          {
            "name": "107203",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107203"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c557bb0910be271e49563756411a690a1bc53ce5"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2019:1108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:21",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-08.html"
        },
        {
          "name": "107203",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107203"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c557bb0910be271e49563756411a690a1bc53ce5"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2019:1108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-9214",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-08.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-08.html"
            },
            {
              "name": "107203",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107203"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c557bb0910be271e49563756411a690a1bc53ce5",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c557bb0910be271e49563756411a690a1bc53ce5"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2019:1108",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-9214",
    "datePublished": "2019-02-28T04:00:00",
    "dateReserved": "2019-02-27T00:00:00",
    "dateUpdated": "2024-08-04T21:38:46.551Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10897 (GCVE-0-2019-10897)

Vulnerability from cvelistv5

Published

2019-04-09 03:52

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-11.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d	x_refsource_MISC
	http://www.securityfocus.com/bid/107836	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.163Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-11.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d"
          },
          {
            "name": "107836",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107836"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:08",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-11.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d"
        },
        {
          "name": "107836",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107836"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10897",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-11.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-11.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d"
            },
            {
              "name": "107836",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107836"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10897",
    "datePublished": "2019-04-09T03:52:14",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.163Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-18225 (GCVE-0-2018-18225)

Vulnerability from cvelistv5

Published

2018-10-12 05:00

Modified

2024-08-05 11:01

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.

References

URL

Tags

	http://www.securitytracker.com/id/1041909	vdb-entry, x_refsource_SECTRACK
	https://www.wireshark.org/security/wnpa-sec-2018-49.html	x_refsource_MISC
	http://www.securityfocus.com/bid/105583	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:14.849Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041909",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041909"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-49.html"
          },
          {
            "name": "105583",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105583"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-07T18:22:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041909",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041909"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-49.html"
        },
        {
          "name": "105583",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105583"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-18225",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041909",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041909"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-49.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-49.html"
            },
            {
              "name": "105583",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105583"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-18225",
    "datePublished": "2018-10-12T05:00:00",
    "dateReserved": "2018-10-10T00:00:00",
    "dateUpdated": "2024-08-05T11:01:14.849Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-11360 (GCVE-0-2018-11360)

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

CWE

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow.

References

URL

Tags

	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4217	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-30.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.325Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "name": "DSA-4217",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-30.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:43",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "name": "DSA-4217",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-30.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11360",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "DSA-4217",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4217"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-30.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-30.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11360",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.325Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16058 (GCVE-0-2018-16058)

Vulnerability from cvelistv5

Published

2018-08-30 01:00

Modified

2024-08-05 10:10

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure.

References

URL

Tags

	https://www.debian.org/security/2018/dsa-4315	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/105174	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041609	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c48d6a6d60c5c9111838a945966b6cb8750777be	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2018-44.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:10:05.803Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4315",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4315"
          },
          {
            "name": "105174",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105174"
          },
          {
            "name": "1041609",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041609"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c48d6a6d60c5c9111838a945966b6cb8750777be"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-44.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:46",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4315",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4315"
        },
        {
          "name": "105174",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105174"
        },
        {
          "name": "1041609",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041609"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c48d6a6d60c5c9111838a945966b6cb8750777be"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-44.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16058",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4315",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4315"
            },
            {
              "name": "105174",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105174"
            },
            {
              "name": "1041609",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041609"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c48d6a6d60c5c9111838a945966b6cb8750777be",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c48d6a6d60c5c9111838a945966b6cb8750777be"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-44.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-44.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16058",
    "datePublished": "2018-08-30T01:00:00",
    "dateReserved": "2018-08-28T00:00:00",
    "dateUpdated": "2024-08-05T10:10:05.803Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-16319 (GCVE-0-2019-16319)

Vulnerability from cvelistv5

Published

2019-09-15 15:15

Modified

2024-08-05 01:10

Severity ?

CWE

Summary

In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-21.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=02ddd49885c6a09e936a76aceb726ed06539704a	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:10:41.669Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-21.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=02ddd49885c6a09e936a76aceb726ed06539704a"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:33",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-21.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=02ddd49885c6a09e936a76aceb726ed06539704a"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-16319",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-21.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-21.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=02ddd49885c6a09e936a76aceb726ed06539704a",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=02ddd49885c6a09e936a76aceb726ed06539704a"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-16319",
    "datePublished": "2019-09-15T15:15:14",
    "dateReserved": "2019-09-15T00:00:00",
    "dateUpdated": "2024-08-05T01:10:41.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-11355 (GCVE-0-2018-11355)

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

CWE

Summary

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-27.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=99d27a5fd2c540f837154aca3b3647f5ccfa0c33	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.353Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-27.html"
          },
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=99d27a5fd2c540f837154aca3b3647f5ccfa0c33"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:17",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-27.html"
        },
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=99d27a5fd2c540f837154aca3b3647f5ccfa0c33"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11355",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-27.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-27.html"
            },
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=99d27a5fd2c540f837154aca3b3647f5ccfa0c33",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=99d27a5fd2c540f837154aca3b3647f5ccfa0c33"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11355",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.353Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5719 (GCVE-0-2019-5719)

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html	mailing-list, x_refsource_MLIST
	https://www.wireshark.org/security/wnpa-sec-2019-04.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5b02f2a9b8772d8814096f86c60a32889d61f2c	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.250Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374"
          },
          {
            "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-04.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5b02f2a9b8772d8814096f86c60a32889d61f2c"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:48",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374"
        },
        {
          "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-04.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5b02f2a9b8772d8814096f86c60a32889d61f2c"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5719",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374"
            },
            {
              "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-04.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-04.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b5b02f2a9b8772d8814096f86c60a32889d61f2c",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b5b02f2a9b8772d8814096f86c60a32889d61f2c"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5719",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.250Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-19625 (GCVE-0-2018-19625)

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dc4d209f39132a4ae05675a11609176ae9705cfc	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://www.wireshark.org/security/wnpa-sec-2018-51.html	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.403Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dc4d209f39132a4ae05675a11609176ae9705cfc"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-51.html"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dc4d209f39132a4ae05675a11609176ae9705cfc"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-51.html"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19625",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=dc4d209f39132a4ae05675a11609176ae9705cfc",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=dc4d209f39132a4ae05675a11609176ae9705cfc"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-51.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-51.html"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19625",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.403Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-19627 (GCVE-0-2018-19627)

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary.

References

URL

Tags

	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60	x_refsource_MISC
	https://www.exploit-db.com/exploits/45951/	exploit, x_refsource_EXPLOIT-DB
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://www.wireshark.org/security/wnpa-sec-2018-55.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.329Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60"
          },
          {
            "name": "45951",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/45951/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-55.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60"
        },
        {
          "name": "45951",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/45951/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-55.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19627",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60"
            },
            {
              "name": "45951",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/45951/"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-55.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-55.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19627",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14344 (GCVE-0-2018-14344)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f7153685b39a164aea09ba7f96ebb648b8328ae	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-35.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.608Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f7153685b39a164aea09ba7f96ebb648b8328ae"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-35.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:22",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f7153685b39a164aea09ba7f96ebb648b8328ae"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-35.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14344",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4f7153685b39a164aea09ba7f96ebb648b8328ae",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4f7153685b39a164aea09ba7f96ebb648b8328ae"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-35.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-35.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14344",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.608Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-9431 (GCVE-0-2020-9431)

Vulnerability from cvelistv5

Published

2020-02-27 22:06

Modified

2024-08-04 10:26

Severity ?

CWE

Summary

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-03.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=086003c9d616906e08bbeeab9c17b3aa4c6ff850	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202007-13	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:26:16.096Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-03.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=086003c9d616906e08bbeeab9c17b3aa4c6ff850"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "FEDORA-2020-ef943221ca",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
          },
          {
            "name": "FEDORA-2020-87737529a4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
          },
          {
            "name": "FEDORA-2020-da7dcee2ec",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
          },
          {
            "name": "GLSA-202007-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-13"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:40",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-03.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=086003c9d616906e08bbeeab9c17b3aa4c6ff850"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "FEDORA-2020-ef943221ca",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
        },
        {
          "name": "FEDORA-2020-87737529a4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
        },
        {
          "name": "FEDORA-2020-da7dcee2ec",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
        },
        {
          "name": "GLSA-202007-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-13"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-9431",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-03.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-03.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=086003c9d616906e08bbeeab9c17b3aa4c6ff850",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=086003c9d616906e08bbeeab9c17b3aa4c6ff850"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "FEDORA-2020-ef943221ca",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
            },
            {
              "name": "FEDORA-2020-87737529a4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
            },
            {
              "name": "FEDORA-2020-da7dcee2ec",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
            },
            {
              "name": "GLSA-202007-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-13"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-9431",
    "datePublished": "2020-02-27T22:06:10",
    "dateReserved": "2020-02-27T00:00:00",
    "dateUpdated": "2024-08-04T10:26:16.096Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-19623 (GCVE-0-2018-19623)

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-53.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9c8645ec7b28e4d7193962ecd2a418613bf6a84f	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.332Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-53.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9c8645ec7b28e4d7193962ecd2a418613bf6a84f"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-53.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9c8645ec7b28e4d7193962ecd2a418613bf6a84f"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19623",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-53.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-53.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9c8645ec7b28e4d7193962ecd2a418613bf6a84f",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9c8645ec7b28e4d7193962ecd2a418613bf6a84f"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19623",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.332Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5721 (GCVE-0-2019-5721)

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.

References

URL

Tags

	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-05.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.131Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-05.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:09",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-05.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5721",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-05.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-05.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5721",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.131Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10894 (GCVE-0-2019-10894)

Vulnerability from cvelistv5

Published

2019-04-09 03:50

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-14.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.040Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-14.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-14.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10894",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-14.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-14.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10894",
    "datePublished": "2019-04-09T03:50:22",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-12086 (GCVE-0-2018-12086)

Vulnerability from cvelistv5

Published

2018-09-14 21:00

Modified

2024-08-05 08:24

Severity ?

CWE

Summary

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

References

URL

Tags

	http://www.securitytracker.com/id/1041909	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/105538	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:24:03.683Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041909",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041909"
          },
          {
            "name": "105538",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105538"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:14",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041909",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041909"
        },
        {
          "name": "105538",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105538"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-12086",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041909",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041909"
            },
            {
              "name": "105538",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105538"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf",
              "refsource": "CONFIRM",
              "url": "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-12086",
    "datePublished": "2018-09-14T21:00:00",
    "dateReserved": "2018-06-09T00:00:00",
    "dateUpdated": "2024-08-05T08:24:03.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10903 (GCVE-0-2019-10903)

Vulnerability from cvelistv5

Published

2019-04-09 03:53

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-18.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eafdcfa4b6d5187a5326442a82608ab03d9dddcb	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-18.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eafdcfa4b6d5187a5326442a82608ab03d9dddcb"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:07",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-18.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eafdcfa4b6d5187a5326442a82608ab03d9dddcb"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10903",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-18.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-18.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=eafdcfa4b6d5187a5326442a82608ab03d9dddcb",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=eafdcfa4b6d5187a5326442a82608ab03d9dddcb"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10903",
    "datePublished": "2019-04-09T03:53:43",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5717 (GCVE-0-2019-5717)

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-02.html	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bf9272a92f3df1e4ccfaad434e123222ae5313f7	x_refsource_MISC
	http://www.securityfocus.com/bid/106482	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.269Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-02.html"
          },
          {
            "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bf9272a92f3df1e4ccfaad434e123222ae5313f7"
          },
          {
            "name": "106482",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106482"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:39",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-02.html"
        },
        {
          "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bf9272a92f3df1e4ccfaad434e123222ae5313f7"
        },
        {
          "name": "106482",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106482"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5717",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-02.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-02.html"
            },
            {
              "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bf9272a92f3df1e4ccfaad434e123222ae5313f7",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bf9272a92f3df1e4ccfaad434e123222ae5313f7"
            },
            {
              "name": "106482",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106482"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5717",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.269Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5718 (GCVE-0-2019-5718)

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373	x_refsource_MISC
	http://www.securityfocus.com/bid/106482	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-03.html	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	https://www.oracle.com/security-alerts/cpujan2020.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.276Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373"
          },
          {
            "name": "106482",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106482"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-03.html"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:29",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373"
        },
        {
          "name": "106482",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106482"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-03.html"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5718",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373"
            },
            {
              "name": "106482",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106482"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-03.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-03.html"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujan2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5718",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14342 (GCVE-0-2018-14342)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=36af43dbb7673495948cd65d0346e8b9812b941c	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-34.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.652Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=36af43dbb7673495948cd65d0346e8b9812b941c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-34.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:43",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=36af43dbb7673495948cd65d0346e8b9812b941c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-34.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14342",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=36af43dbb7673495948cd65d0346e8b9812b941c",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=36af43dbb7673495948cd65d0346e8b9812b941c"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-34.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-34.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14342",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.652Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-11358 (GCVE-0-2018-11358)

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

CWE

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-31.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4217	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ccb1ac3c8cec47fbbbf2e80ced80644005c65252	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.402Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-31.html"
          },
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689"
          },
          {
            "name": "DSA-4217",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ccb1ac3c8cec47fbbbf2e80ced80644005c65252"
          },
          {
            "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:49",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-31.html"
        },
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689"
        },
        {
          "name": "DSA-4217",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ccb1ac3c8cec47fbbbf2e80ced80644005c65252"
        },
        {
          "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11358",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-31.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-31.html"
            },
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689"
            },
            {
              "name": "DSA-4217",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4217"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=ccb1ac3c8cec47fbbbf2e80ced80644005c65252",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=ccb1ac3c8cec47fbbbf2e80ced80644005c65252"
            },
            {
              "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11358",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.402Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16056 (GCVE-0-2018-16056)

Vulnerability from cvelistv5

Published

2018-08-30 01:00

Modified

2024-08-05 10:10

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists.

References

URL

Tags

	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4315	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/105174	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041609	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2018-45.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:10:05.795Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485"
          },
          {
            "name": "DSA-4315",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4315"
          },
          {
            "name": "105174",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105174"
          },
          {
            "name": "1041609",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041609"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-45.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485"
        },
        {
          "name": "DSA-4315",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4315"
        },
        {
          "name": "105174",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105174"
        },
        {
          "name": "1041609",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041609"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-45.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16056",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f98fbce64cb230e94a2cafc410a3cedad657b485",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f98fbce64cb230e94a2cafc410a3cedad657b485"
            },
            {
              "name": "DSA-4315",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4315"
            },
            {
              "name": "105174",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105174"
            },
            {
              "name": "1041609",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041609"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-45.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-45.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16056",
    "datePublished": "2018-08-30T01:00:00",
    "dateReserved": "2018-08-28T00:00:00",
    "dateUpdated": "2024-08-05T10:10:05.795Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-19628 (GCVE-0-2018-19628)

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-57.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=212b18825d9b668cda23d334c48867dfa66b2b36	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.435Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-57.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=212b18825d9b668cda23d334c48867dfa66b2b36"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-57.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=212b18825d9b668cda23d334c48867dfa66b2b36"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19628",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-57.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-57.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=212b18825d9b668cda23d334c48867dfa66b2b36",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=212b18825d9b668cda23d334c48867dfa66b2b36"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19628",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.435Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5716 (GCVE-0-2019-5716)

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.

References

URL

Tags

	https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/106482	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2b2eea1793dbff813896e1ae9dff1bedb39ee010	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-01.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.348Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
          },
          {
            "name": "106482",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106482"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2b2eea1793dbff813896e1ae9dff1bedb39ee010"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-01.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:38",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
        },
        {
          "name": "106482",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106482"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2b2eea1793dbff813896e1ae9dff1bedb39ee010"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-01.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5716",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
            },
            {
              "name": "106482",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106482"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2b2eea1793dbff813896e1ae9dff1bedb39ee010",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2b2eea1793dbff813896e1ae9dff1bedb39ee010"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-01.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-01.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5716",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10902 (GCVE-0-2019-10902)

Vulnerability from cvelistv5

Published

2019-04-09 03:53

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-16.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=95571f17d5e2de39735e62e5251583f930c06d51	x_refsource_MISC
	http://www.securityfocus.com/bid/107836	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.193Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-16.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=95571f17d5e2de39735e62e5251583f930c06d51"
          },
          {
            "name": "107836",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107836"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:51",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-16.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=95571f17d5e2de39735e62e5251583f930c06d51"
        },
        {
          "name": "107836",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107836"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10902",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-16.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-16.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=95571f17d5e2de39735e62e5251583f930c06d51",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=95571f17d5e2de39735e62e5251583f930c06d51"
            },
            {
              "name": "107836",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107836"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10902",
    "datePublished": "2019-04-09T03:53:25",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.193Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-11361 (GCVE-0-2018-11361)

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

CWE

Summary

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.

References

URL

Tags

	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1b52f9929238ce3948ec924ae4f9456b5e9df558	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-32.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.325Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1b52f9929238ce3948ec924ae4f9456b5e9df558"
          },
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-32.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:41",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1b52f9929238ce3948ec924ae4f9456b5e9df558"
        },
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-32.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11361",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1b52f9929238ce3948ec924ae4f9456b5e9df558",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1b52f9929238ce3948ec924ae4f9456b5e9df558"
            },
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-32.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-32.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11361",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.325Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-18226 (GCVE-0-2018-18226)

Vulnerability from cvelistv5

Published

2018-10-12 05:00

Modified

2024-08-05 11:01

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.

References

URL

Tags

	http://www.securitytracker.com/id/1041909	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171	x_refsource_MISC
	http://www.securityfocus.com/bid/105583	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://www.wireshark.org/security/wnpa-sec-2018-48.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:15.077Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041909",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041909"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171"
          },
          {
            "name": "105583",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105583"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-48.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:20",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041909",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041909"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171"
        },
        {
          "name": "105583",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105583"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-48.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-18226",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041909",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041909"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171"
            },
            {
              "name": "105583",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105583"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-48.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-48.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-18226",
    "datePublished": "2018-10-12T05:00:00",
    "dateReserved": "2018-10-10T00:00:00",
    "dateUpdated": "2024-08-05T11:01:15.077Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-13619 (GCVE-0-2019-13619)

Vulnerability from cvelistv5

Published

2019-07-17 19:18

Modified

2024-08-04 23:57

Severity ?

CWE

Summary

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-20.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7e90aed666e809c0db5de9d1816802a7dcea28d9	x_refsource_MISC
	http://www.securityfocus.com/bid/109293	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00068.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JY52XAC2UNC4X4ZPIXYMK5SVXV2PO5I3/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4QVJALLGVVC7MBUT4B4SHQVDXGJKGI7/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/4133-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:57:39.523Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-20.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7e90aed666e809c0db5de9d1816802a7dcea28d9"
          },
          {
            "name": "109293",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/109293"
          },
          {
            "name": "openSUSE-SU-2019:1965",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00068.html"
          },
          {
            "name": "FEDORA-2019-70e93298e3",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JY52XAC2UNC4X4ZPIXYMK5SVXV2PO5I3/"
          },
          {
            "name": "FEDORA-2019-23f7634765",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4QVJALLGVVC7MBUT4B4SHQVDXGJKGI7/"
          },
          {
            "name": "USN-4133-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4133-1/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:47",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-20.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7e90aed666e809c0db5de9d1816802a7dcea28d9"
        },
        {
          "name": "109293",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/109293"
        },
        {
          "name": "openSUSE-SU-2019:1965",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00068.html"
        },
        {
          "name": "FEDORA-2019-70e93298e3",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JY52XAC2UNC4X4ZPIXYMK5SVXV2PO5I3/"
        },
        {
          "name": "FEDORA-2019-23f7634765",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4QVJALLGVVC7MBUT4B4SHQVDXGJKGI7/"
        },
        {
          "name": "USN-4133-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4133-1/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13619",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-20.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-20.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=7e90aed666e809c0db5de9d1816802a7dcea28d9",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=7e90aed666e809c0db5de9d1816802a7dcea28d9"
            },
            {
              "name": "109293",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/109293"
            },
            {
              "name": "openSUSE-SU-2019:1965",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00068.html"
            },
            {
              "name": "FEDORA-2019-70e93298e3",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JY52XAC2UNC4X4ZPIXYMK5SVXV2PO5I3/"
            },
            {
              "name": "FEDORA-2019-23f7634765",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q4QVJALLGVVC7MBUT4B4SHQVDXGJKGI7/"
            },
            {
              "name": "USN-4133-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4133-1/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13619",
    "datePublished": "2019-07-17T19:18:03",
    "dateReserved": "2019-07-16T00:00:00",
    "dateUpdated": "2024-08-04T23:57:39.523Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-9428 (GCVE-0-2020-9428)

Vulnerability from cvelistv5

Published

2020-02-27 22:06

Modified

2024-08-04 10:26

Severity ?

CWE

Summary

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-05.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9fe2de783dbcbe74144678d60a4e3923367044b2	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202007-13	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:26:16.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-05.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9fe2de783dbcbe74144678d60a4e3923367044b2"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "FEDORA-2020-ef943221ca",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
          },
          {
            "name": "FEDORA-2020-87737529a4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
          },
          {
            "name": "FEDORA-2020-da7dcee2ec",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
          },
          {
            "name": "GLSA-202007-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-13"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:37",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-05.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9fe2de783dbcbe74144678d60a4e3923367044b2"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "FEDORA-2020-ef943221ca",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
        },
        {
          "name": "FEDORA-2020-87737529a4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
        },
        {
          "name": "FEDORA-2020-da7dcee2ec",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
        },
        {
          "name": "GLSA-202007-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-13"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-9428",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-05.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-05.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9fe2de783dbcbe74144678d60a4e3923367044b2",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9fe2de783dbcbe74144678d60a4e3923367044b2"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "FEDORA-2020-ef943221ca",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
            },
            {
              "name": "FEDORA-2020-87737529a4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
            },
            {
              "name": "FEDORA-2020-da7dcee2ec",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
            },
            {
              "name": "GLSA-202007-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-13"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-9428",
    "datePublished": "2020-02-27T22:06:50",
    "dateReserved": "2020-02-27T00:00:00",
    "dateUpdated": "2024-08-04T10:26:16.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-19626 (GCVE-0-2018-19626)

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-52.html	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5a65115ebab55cfd5ce0a855c2256e01cab6449	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.416Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-52.html"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5a65115ebab55cfd5ce0a855c2256e01cab6449"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding \u0027\\0\u0027 termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-52.html"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5a65115ebab55cfd5ce0a855c2256e01cab6449"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19626",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding \u0027\\0\u0027 termination."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-52.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-52.html"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c5a65115ebab55cfd5ce0a855c2256e01cab6449",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c5a65115ebab55cfd5ce0a855c2256e01cab6449"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19626",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.416Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10898 (GCVE-0-2019-10898)

Vulnerability from cvelistv5

Published

2019-04-09 03:52

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-12.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f80b7d1b279fb6c13f640019a1bbc42b18bf7469	x_refsource_MISC
	http://www.securityfocus.com/bid/107836	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.040Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-12.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f80b7d1b279fb6c13f640019a1bbc42b18bf7469"
          },
          {
            "name": "107836",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107836"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:18",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-12.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f80b7d1b279fb6c13f640019a1bbc42b18bf7469"
        },
        {
          "name": "107836",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107836"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10898",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-12.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-12.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f80b7d1b279fb6c13f640019a1bbc42b18bf7469",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f80b7d1b279fb6c13f640019a1bbc42b18bf7469"
            },
            {
              "name": "107836",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107836"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10898",
    "datePublished": "2019-04-09T03:52:25",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9208 (GCVE-0-2019-9208)

Vulnerability from cvelistv5

Published

2019-02-28 04:00

Modified

2024-08-04 21:38

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.

References

URL

Tags

	http://www.securityfocus.com/bid/107203	vdb-entry, x_refsource_BID
	https://www.wireshark.org/security/wnpa-sec-2019-07.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpujan2020.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:38:46.612Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "107203",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107203"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-07.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2019:1108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:04",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "107203",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107203"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-07.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2019:1108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-9208",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "107203",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107203"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-07.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-07.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2019:1108",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujan2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-9208",
    "datePublished": "2019-02-28T04:00:00",
    "dateReserved": "2019-02-26T00:00:00",
    "dateUpdated": "2024-08-04T21:38:46.612Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14370 (GCVE-0-2018-14370)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:29

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-43.html	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b1446124eebc3ea5591d18e719c2a5cff3630638	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:51.205Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-43.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b1446124eebc3ea5591d18e719c2a5cff3630638"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:23",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-43.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b1446124eebc3ea5591d18e719c2a5cff3630638"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14370",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-43.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-43.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b1446124eebc3ea5591d18e719c2a5cff3630638",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b1446124eebc3ea5591d18e719c2a5cff3630638"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14370",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:29:51.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-19622 (GCVE-0-2018-19622)

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-54.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b7555d32d11862f0e500ec466ad6bfe54190076	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.417Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-54.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b7555d32d11862f0e500ec466ad6bfe54190076"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-54.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b7555d32d11862f0e500ec466ad6bfe54190076"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19622",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-54.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-54.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b7555d32d11862f0e500ec466ad6bfe54190076",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b7555d32d11862f0e500ec466ad6bfe54190076"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19622",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.417Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10901 (GCVE-0-2019-10901)

Vulnerability from cvelistv5

Published

2019-04-09 03:53

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-17.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.280Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-17.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:10",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-17.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10901",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-17.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-17.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10901",
    "datePublished": "2019-04-09T03:53:11",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.280Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-9429 (GCVE-0-2020-9429)

Vulnerability from cvelistv5

Published

2020-02-27 22:06

Modified

2024-08-04 10:26

Severity ?

CWE

Summary

In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-06.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2530f740d67d41908e84434bb5ec99480c2ac2e	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/202007-13	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:26:16.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-06.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2530f740d67d41908e84434bb5ec99480c2ac2e"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "GLSA-202007-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-27T01:06:20",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-06.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2530f740d67d41908e84434bb5ec99480c2ac2e"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "GLSA-202007-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-13"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-9429",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-06.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-06.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a2530f740d67d41908e84434bb5ec99480c2ac2e",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a2530f740d67d41908e84434bb5ec99480c2ac2e"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=73c5fff899f253c44a72657048aec7db6edee571",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=73c5fff899f253c44a72657048aec7db6edee571"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "GLSA-202007-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-13"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-9429",
    "datePublished": "2020-02-27T22:06:39",
    "dateReserved": "2020-02-27T00:00:00",
    "dateUpdated": "2024-08-04T10:26:16.091Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-7044 (GCVE-0-2020-7044)

Vulnerability from cvelistv5

Published

2020-01-16 03:05

Modified

2024-08-04 09:18

Severity ?

CWE

Summary

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-01.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f90a3720b73ca140403315126e2a478c4f70ca03	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:18:02.903Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-01.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f90a3720b73ca140403315126e2a478c4f70ca03"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          },
          {
            "name": "FEDORA-2020-ef943221ca",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
          },
          {
            "name": "FEDORA-2020-87737529a4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
          },
          {
            "name": "FEDORA-2020-da7dcee2ec",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using \u003e= and \u003c= to resolve off-by-one errors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-25T06:06:21",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-01.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f90a3720b73ca140403315126e2a478c4f70ca03"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        },
        {
          "name": "FEDORA-2020-ef943221ca",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
        },
        {
          "name": "FEDORA-2020-87737529a4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
        },
        {
          "name": "FEDORA-2020-da7dcee2ec",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-7044",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using \u003e= and \u003c= to resolve off-by-one errors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-01.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-01.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f90a3720b73ca140403315126e2a478c4f70ca03",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f90a3720b73ca140403315126e2a478c4f70ca03"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            },
            {
              "name": "FEDORA-2020-ef943221ca",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
            },
            {
              "name": "FEDORA-2020-87737529a4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
            },
            {
              "name": "FEDORA-2020-da7dcee2ec",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-7044",
    "datePublished": "2020-01-16T03:05:59",
    "dateReserved": "2020-01-14T00:00:00",
    "dateUpdated": "2024-08-04T09:18:02.903Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10895 (GCVE-0-2019-10895)

Vulnerability from cvelistv5

Published

2019-04-09 03:50

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-09.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.290Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-09.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:10",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-09.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10895",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-09.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-09.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2fbbde780e5d5d82e31dca656217daf278cf62bb",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2fbbde780e5d5d82e31dca656217daf278cf62bb"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10895",
    "datePublished": "2019-04-09T03:50:45",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.290Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14340 (GCVE-0-2018-14340)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-36.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=672d882a53f96730e4ef1e5b1639c585823b0df8	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.627Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-36.html"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=672d882a53f96730e4ef1e5b1639c585823b0df8"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:26",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-36.html"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=672d882a53f96730e4ef1e5b1639c585823b0df8"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14340",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-36.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-36.html"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=672d882a53f96730e4ef1e5b1639c585823b0df8",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=672d882a53f96730e4ef1e5b1639c585823b0df8"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14340",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.627Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10900 (GCVE-0-2019-10900)

Vulnerability from cvelistv5

Published

2019-04-09 03:52

Modified

2024-08-04 22:40

Severity ?

CWE

Summary

In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2019-13.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=26eee01f57f0a86fb375892c7937eac24ede4610	x_refsource_MISC
	http://www.securityfocus.com/bid/107836	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.119Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-13.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=26eee01f57f0a86fb375892c7937eac24ede4610"
          },
          {
            "name": "107836",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107836"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:32",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-13.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=26eee01f57f0a86fb375892c7937eac24ede4610"
        },
        {
          "name": "107836",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107836"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10900",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-13.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-13.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=26eee01f57f0a86fb375892c7937eac24ede4610",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=26eee01f57f0a86fb375892c7937eac24ede4610"
            },
            {
              "name": "107836",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107836"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10900",
    "datePublished": "2019-04-09T03:52:55",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14339 (GCVE-0-2018-14339)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.

References

URL

Tags

	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b77c0a596a8071aebc1de71e3f79e5e15e919ca	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://www.wireshark.org/security/wnpa-sec-2018-38.html	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.582Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b77c0a596a8071aebc1de71e3f79e5e15e919ca"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-38.html"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b77c0a596a8071aebc1de71e3f79e5e15e919ca"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-38.html"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14339",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b77c0a596a8071aebc1de71e3f79e5e15e919ca",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b77c0a596a8071aebc1de71e3f79e5e15e919ca"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-38.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-38.html"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14339",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-19624 (GCVE-0-2018-19624)

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference.

References

URL

Tags

	https://www.wireshark.org/security/wnpa-sec-2018-56.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3e319db1107b08fc3be804b6d449143ec9aa0dec	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.319Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-56.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3e319db1107b08fc3be804b6d449143ec9aa0dec"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-56.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3e319db1107b08fc3be804b6d449143ec9aa0dec"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19624",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-56.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-56.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3e319db1107b08fc3be804b6d449143ec9aa0dec",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3e319db1107b08fc3be804b6d449143ec9aa0dec"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19624",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14367 (GCVE-0-2018-14367)

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:29

Severity ?

CWE

Summary

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-42.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:51.054Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-42.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:19",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-42.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14367",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-42.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-42.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14367",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:29:51.054Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-9430 (GCVE-0-2020-9430)

Vulnerability from cvelistv5

Published

2020-02-27 22:06

Modified

2024-08-04 10:26

Severity ?

CWE

Summary

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.

References

URL

Tags

	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-04.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=93d6b03a67953b82880cdbdcf0d30e2a3246d790	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6b98dc63701b1da1cc7681cb383dabb0b7007d73	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202007-13	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:26:16.188Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-04.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=93d6b03a67953b82880cdbdcf0d30e2a3246d790"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6b98dc63701b1da1cc7681cb383dabb0b7007d73"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "FEDORA-2020-ef943221ca",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
          },
          {
            "name": "FEDORA-2020-87737529a4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
          },
          {
            "name": "FEDORA-2020-da7dcee2ec",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
          },
          {
            "name": "GLSA-202007-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-13"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:42",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-04.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=93d6b03a67953b82880cdbdcf0d30e2a3246d790"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6b98dc63701b1da1cc7681cb383dabb0b7007d73"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "FEDORA-2020-ef943221ca",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
        },
        {
          "name": "FEDORA-2020-87737529a4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
        },
        {
          "name": "FEDORA-2020-da7dcee2ec",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
        },
        {
          "name": "GLSA-202007-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-13"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-9430",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-04.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-04.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=93d6b03a67953b82880cdbdcf0d30e2a3246d790",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=93d6b03a67953b82880cdbdcf0d30e2a3246d790"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6b98dc63701b1da1cc7681cb383dabb0b7007d73",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6b98dc63701b1da1cc7681cb383dabb0b7007d73"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "FEDORA-2020-ef943221ca",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
            },
            {
              "name": "FEDORA-2020-87737529a4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
            },
            {
              "name": "FEDORA-2020-da7dcee2ec",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
            },
            {
              "name": "GLSA-202007-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-13"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-9430",
    "datePublished": "2020-02-27T22:06:26",
    "dateReserved": "2020-02-27T00:00:00",
    "dateUpdated": "2024-08-04T10:26:16.188Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

opensuse-su-2020:0362-1

Vulnerability from csaf_opensuse

CVE-2018-11359 (GCVE-0-2018-11359)

Vulnerability from cvelistv5

CVE-2018-14369 (GCVE-0-2018-14369)

Vulnerability from cvelistv5

CVE-2018-18227 (GCVE-0-2018-18227)

Vulnerability from cvelistv5

CVE-2018-16057 (GCVE-0-2018-16057)

Vulnerability from cvelistv5

CVE-2018-11357 (GCVE-0-2018-11357)

Vulnerability from cvelistv5

CVE-2018-14368 (GCVE-0-2018-14368)

Vulnerability from cvelistv5

CVE-2019-10899 (GCVE-0-2019-10899)

Vulnerability from cvelistv5

CVE-2019-19553 (GCVE-0-2019-19553)

Vulnerability from cvelistv5

CVE-2019-9209 (GCVE-0-2019-9209)

Vulnerability from cvelistv5

CVE-2018-11362 (GCVE-0-2018-11362)

Vulnerability from cvelistv5

CVE-2018-11354 (GCVE-0-2018-11354)

Vulnerability from cvelistv5

CVE-2018-11356 (GCVE-0-2018-11356)

Vulnerability from cvelistv5

CVE-2018-14341 (GCVE-0-2018-14341)

Vulnerability from cvelistv5

CVE-2018-14343 (GCVE-0-2018-14343)

Vulnerability from cvelistv5

CVE-2019-10896 (GCVE-0-2019-10896)

Vulnerability from cvelistv5

CVE-2019-9214 (GCVE-0-2019-9214)

Vulnerability from cvelistv5

CVE-2019-10897 (GCVE-0-2019-10897)

Vulnerability from cvelistv5

CVE-2018-18225 (GCVE-0-2018-18225)

Vulnerability from cvelistv5

CVE-2018-11360 (GCVE-0-2018-11360)

Vulnerability from cvelistv5

CVE-2018-16058 (GCVE-0-2018-16058)

Vulnerability from cvelistv5

CVE-2019-16319 (GCVE-0-2019-16319)

Vulnerability from cvelistv5

CVE-2018-11355 (GCVE-0-2018-11355)

Vulnerability from cvelistv5

CVE-2019-5719 (GCVE-0-2019-5719)

Vulnerability from cvelistv5

CVE-2018-19625 (GCVE-0-2018-19625)

Vulnerability from cvelistv5

CVE-2018-19627 (GCVE-0-2018-19627)

Vulnerability from cvelistv5

CVE-2018-14344 (GCVE-0-2018-14344)

Vulnerability from cvelistv5

CVE-2020-9431 (GCVE-0-2020-9431)

Vulnerability from cvelistv5

CVE-2018-19623 (GCVE-0-2018-19623)

Vulnerability from cvelistv5

CVE-2019-5721 (GCVE-0-2019-5721)

Vulnerability from cvelistv5

CVE-2019-10894 (GCVE-0-2019-10894)

Vulnerability from cvelistv5

CVE-2018-12086 (GCVE-0-2018-12086)

Vulnerability from cvelistv5

CVE-2019-10903 (GCVE-0-2019-10903)

Vulnerability from cvelistv5

CVE-2019-5717 (GCVE-0-2019-5717)

Vulnerability from cvelistv5

CVE-2019-5718 (GCVE-0-2019-5718)

Vulnerability from cvelistv5

CVE-2018-14342 (GCVE-0-2018-14342)

Vulnerability from cvelistv5

CVE-2018-11358 (GCVE-0-2018-11358)

Vulnerability from cvelistv5

CVE-2018-16056 (GCVE-0-2018-16056)

Vulnerability from cvelistv5

CVE-2018-19628 (GCVE-0-2018-19628)

Vulnerability from cvelistv5

CVE-2019-5716 (GCVE-0-2019-5716)