csaf_opensuse - opensuse-su-2020:0362-1

Vulnerability from csaf_opensuse

Published

2020-03-19 19:19

Modified

2020-03-19 19:19

Summary

Security update for wireshark

Notes

Title of the patch

Security update for wireshark

Description of the patch

This update for wireshark and libmaxminddb fixes the following issues: Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288). New features include: - Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC - Improved support for existing protocols, like HTTP/2 - Improved analytics and usability functionalities This update was imported from the SUSE:SLE-15:Update update project.

Patchnames

openSUSE-2020-362

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wireshark",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wireshark and libmaxminddb fixes the following issues:\n\nUpdate wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).\n\nNew features include:\n\n- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC\n- Improved support for existing protocols, like HTTP/2\n- Improved analytics and usability functionalities\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-362",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0362-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:0362-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5IUFGOOBYOJSD6ELATYP2KAV4TMLYPWB/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:0362-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5IUFGOOBYOJSD6ELATYP2KAV4TMLYPWB/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1093733",
        "url": "https://bugzilla.suse.com/1093733"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1094301",
        "url": "https://bugzilla.suse.com/1094301"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101776",
        "url": "https://bugzilla.suse.com/1101776"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101777",
        "url": "https://bugzilla.suse.com/1101777"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101786",
        "url": "https://bugzilla.suse.com/1101786"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101788",
        "url": "https://bugzilla.suse.com/1101788"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101791",
        "url": "https://bugzilla.suse.com/1101791"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101794",
        "url": "https://bugzilla.suse.com/1101794"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101800",
        "url": "https://bugzilla.suse.com/1101800"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101802",
        "url": "https://bugzilla.suse.com/1101802"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101804",
        "url": "https://bugzilla.suse.com/1101804"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101810",
        "url": "https://bugzilla.suse.com/1101810"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106514",
        "url": "https://bugzilla.suse.com/1106514"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1111647",
        "url": "https://bugzilla.suse.com/1111647"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117740",
        "url": "https://bugzilla.suse.com/1117740"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121231",
        "url": "https://bugzilla.suse.com/1121231"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121232",
        "url": "https://bugzilla.suse.com/1121232"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121233",
        "url": "https://bugzilla.suse.com/1121233"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121234",
        "url": "https://bugzilla.suse.com/1121234"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1121235",
        "url": "https://bugzilla.suse.com/1121235"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127367",
        "url": "https://bugzilla.suse.com/1127367"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127369",
        "url": "https://bugzilla.suse.com/1127369"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127370",
        "url": "https://bugzilla.suse.com/1127370"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131941",
        "url": "https://bugzilla.suse.com/1131941"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131945",
        "url": "https://bugzilla.suse.com/1131945"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136021",
        "url": "https://bugzilla.suse.com/1136021"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1141980",
        "url": "https://bugzilla.suse.com/1141980"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150690",
        "url": "https://bugzilla.suse.com/1150690"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156288",
        "url": "https://bugzilla.suse.com/1156288"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1158505",
        "url": "https://bugzilla.suse.com/1158505"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1161052",
        "url": "https://bugzilla.suse.com/1161052"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165241",
        "url": "https://bugzilla.suse.com/1165241"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165710",
        "url": "https://bugzilla.suse.com/1165710"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 957624",
        "url": "https://bugzilla.suse.com/957624"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11354 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11354/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11355 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11355/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11356 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11356/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11357 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11357/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11358 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11358/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11359 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11359/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11360 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11360/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11361 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11361/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-11362 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-11362/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-12086 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-12086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14339 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14339/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14340 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14340/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14341 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14341/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14342 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14342/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14343 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14343/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14344 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14344/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14367 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14367/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14368 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14368/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14369 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14369/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14370 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14370/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16056 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16056/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16057 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16057/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16058 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16058/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18225 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18225/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18226 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18226/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18227 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18227/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19622 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19622/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19623 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19623/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19624 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19624/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19625 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19625/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19626 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19626/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19627 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19627/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19628 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19628/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10894 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10894/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10895 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10895/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10896 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10896/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10897 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10897/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10898 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10898/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10899 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10899/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10900 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10900/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10901 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10901/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10902 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10902/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10903 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10903/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13619 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13619/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16319 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16319/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19553 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19553/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5716 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5717 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5717/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5718 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5719 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5721 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5721/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9208 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9208/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9209 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9209/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9214 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9214/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-7044 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-7044/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-9428 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-9428/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-9429 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-9429/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-9430 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-9430/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-9431 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-9431/"
      }
    ],
    "title": "Security update for wireshark",
    "tracking": {
      "current_release_date": "2020-03-19T19:19:35Z",
      "generator": {
        "date": "2020-03-19T19:19:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:0362-1",
      "initial_release_date": "2020-03-19T19:19:35Z",
      "revision_history": [
        {
          "date": "2020-03-19T19:19:35Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
                "product": {
                  "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
                  "product_id": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libmaxminddb0-1.4.2-lp151.3.3.1.i586",
                "product": {
                  "name": "libmaxminddb0-1.4.2-lp151.3.3.1.i586",
                  "product_id": "libmaxminddb0-1.4.2-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libspandsp2-0.0.6-lp151.3.3.1.i586",
                "product": {
                  "name": "libspandsp2-0.0.6-lp151.3.3.1.i586",
                  "product_id": "libspandsp2-0.0.6-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libwireshark13-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "libwireshark13-3.2.2-lp151.2.9.1.i586",
                  "product_id": "libwireshark13-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libwiretap10-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "libwiretap10-3.2.2-lp151.2.9.1.i586",
                  "product_id": "libwiretap10-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libwsutil11-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "libwsutil11-3.2.2-lp151.2.9.1.i586",
                  "product_id": "libwsutil11-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "mmdblookup-1.4.2-lp151.3.3.1.i586",
                "product": {
                  "name": "mmdblookup-1.4.2-lp151.3.3.1.i586",
                  "product_id": "mmdblookup-1.4.2-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "spandsp-devel-0.0.6-lp151.3.3.1.i586",
                "product": {
                  "name": "spandsp-devel-0.0.6-lp151.3.3.1.i586",
                  "product_id": "spandsp-devel-0.0.6-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "wireshark-3.2.2-lp151.2.9.1.i586",
                  "product_id": "wireshark-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-devel-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "wireshark-devel-3.2.2-lp151.2.9.1.i586",
                  "product_id": "wireshark-devel-3.2.2-lp151.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
                "product": {
                  "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
                  "product_id": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "spandsp-doc-0.0.6-lp151.3.3.1.noarch",
                "product": {
                  "name": "spandsp-doc-0.0.6-lp151.3.3.1.noarch",
                  "product_id": "spandsp-doc-0.0.6-lp151.3.3.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
                  "product_id": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
                  "product_id": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
                  "product_id": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libspandsp2-0.0.6-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libspandsp2-0.0.6-lp151.3.3.1.x86_64",
                  "product_id": "libspandsp2-0.0.6-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
                "product": {
                  "name": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
                  "product_id": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwireshark13-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "libwireshark13-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "libwireshark13-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwiretap10-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "libwiretap10-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "libwiretap10-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwsutil11-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "libwsutil11-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "libwsutil11-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mmdblookup-1.4.2-lp151.3.3.1.x86_64",
                "product": {
                  "name": "mmdblookup-1.4.2-lp151.3.3.1.x86_64",
                  "product_id": "mmdblookup-1.4.2-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
                "product": {
                  "name": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
                  "product_id": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "wireshark-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "wireshark-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64",
                "product": {
                  "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64",
                  "product_id": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586"
        },
        "product_reference": "libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64"
        },
        "product_reference": "libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb0-1.4.2-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586"
        },
        "product_reference": "libmaxminddb0-1.4.2-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64"
        },
        "product_reference": "libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64"
        },
        "product_reference": "libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libspandsp2-0.0.6-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586"
        },
        "product_reference": "libspandsp2-0.0.6-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libspandsp2-0.0.6-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64"
        },
        "product_reference": "libspandsp2-0.0.6-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64"
        },
        "product_reference": "libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwireshark13-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "libwireshark13-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwireshark13-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "libwireshark13-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwiretap10-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "libwiretap10-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwiretap10-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "libwiretap10-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwsutil11-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "libwsutil11-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwsutil11-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "libwsutil11-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mmdblookup-1.4.2-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586"
        },
        "product_reference": "mmdblookup-1.4.2-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mmdblookup-1.4.2-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64"
        },
        "product_reference": "mmdblookup-1.4.2-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spandsp-devel-0.0.6-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586"
        },
        "product_reference": "spandsp-devel-0.0.6-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64"
        },
        "product_reference": "spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spandsp-doc-0.0.6-lp151.3.3.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch"
        },
        "product_reference": "spandsp-doc-0.0.6-lp151.3.3.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "wireshark-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "wireshark-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "wireshark-devel-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586"
        },
        "product_reference": "wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        },
        "product_reference": "wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-11354",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11354"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11354",
          "url": "https://www.suse.com/security/cve/CVE-2018-11354"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11354",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11354"
    },
    {
      "cve": "CVE-2018-11355",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11355"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11355",
          "url": "https://www.suse.com/security/cve/CVE-2018-11355"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11355",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11355"
    },
    {
      "cve": "CVE-2018-11356",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11356"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11356",
          "url": "https://www.suse.com/security/cve/CVE-2018-11356"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11356",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11356"
    },
    {
      "cve": "CVE-2018-11357",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11357"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11357",
          "url": "https://www.suse.com/security/cve/CVE-2018-11357"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11357",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11357"
    },
    {
      "cve": "CVE-2018-11358",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11358"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11358",
          "url": "https://www.suse.com/security/cve/CVE-2018-11358"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11358",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11358"
    },
    {
      "cve": "CVE-2018-11359",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11359"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11359",
          "url": "https://www.suse.com/security/cve/CVE-2018-11359"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11359",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11359"
    },
    {
      "cve": "CVE-2018-11360",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11360"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11360",
          "url": "https://www.suse.com/security/cve/CVE-2018-11360"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11360",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11360"
    },
    {
      "cve": "CVE-2018-11361",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11361"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11361",
          "url": "https://www.suse.com/security/cve/CVE-2018-11361"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11361",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11361"
    },
    {
      "cve": "CVE-2018-11362",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-11362"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing \u0027\\0\u0027 character.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-11362",
          "url": "https://www.suse.com/security/cve/CVE-2018-11362"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094301 for CVE-2018-11362",
          "url": "https://bugzilla.suse.com/1094301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-11362"
    },
    {
      "cve": "CVE-2018-12086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-12086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-12086",
          "url": "https://www.suse.com/security/cve/CVE-2018-12086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1111647 for CVE-2018-12086",
          "url": "https://bugzilla.suse.com/1111647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-12086"
    },
    {
      "cve": "CVE-2018-14339",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14339"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14339",
          "url": "https://www.suse.com/security/cve/CVE-2018-14339"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101810 for CVE-2018-14339",
          "url": "https://bugzilla.suse.com/1101810"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14339"
    },
    {
      "cve": "CVE-2018-14340",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14340"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14340",
          "url": "https://www.suse.com/security/cve/CVE-2018-14340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101804 for CVE-2018-14340",
          "url": "https://bugzilla.suse.com/1101804"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14340"
    },
    {
      "cve": "CVE-2018-14341",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14341"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14341",
          "url": "https://www.suse.com/security/cve/CVE-2018-14341"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101776 for CVE-2018-14341",
          "url": "https://bugzilla.suse.com/1101776"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14341"
    },
    {
      "cve": "CVE-2018-14342",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14342"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14342",
          "url": "https://www.suse.com/security/cve/CVE-2018-14342"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101777 for CVE-2018-14342",
          "url": "https://bugzilla.suse.com/1101777"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14342"
    },
    {
      "cve": "CVE-2018-14343",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14343"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14343",
          "url": "https://www.suse.com/security/cve/CVE-2018-14343"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101786 for CVE-2018-14343",
          "url": "https://bugzilla.suse.com/1101786"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14343"
    },
    {
      "cve": "CVE-2018-14344",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14344"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14344",
          "url": "https://www.suse.com/security/cve/CVE-2018-14344"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101788 for CVE-2018-14344",
          "url": "https://bugzilla.suse.com/1101788"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14344"
    },
    {
      "cve": "CVE-2018-14367",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14367"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14367",
          "url": "https://www.suse.com/security/cve/CVE-2018-14367"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101791 for CVE-2018-14367",
          "url": "https://bugzilla.suse.com/1101791"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14367"
    },
    {
      "cve": "CVE-2018-14368",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14368"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14368",
          "url": "https://www.suse.com/security/cve/CVE-2018-14368"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101794 for CVE-2018-14368",
          "url": "https://bugzilla.suse.com/1101794"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14368"
    },
    {
      "cve": "CVE-2018-14369",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14369"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14369",
          "url": "https://www.suse.com/security/cve/CVE-2018-14369"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101800 for CVE-2018-14369",
          "url": "https://bugzilla.suse.com/1101800"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14369"
    },
    {
      "cve": "CVE-2018-14370",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14370"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14370",
          "url": "https://www.suse.com/security/cve/CVE-2018-14370"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101802 for CVE-2018-14370",
          "url": "https://bugzilla.suse.com/1101802"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-14370"
    },
    {
      "cve": "CVE-2018-16056",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16056"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16056",
          "url": "https://www.suse.com/security/cve/CVE-2018-16056"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106514 for CVE-2018-16056",
          "url": "https://bugzilla.suse.com/1106514"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16056"
    },
    {
      "cve": "CVE-2018-16057",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16057"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16057",
          "url": "https://www.suse.com/security/cve/CVE-2018-16057"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106514 for CVE-2018-16057",
          "url": "https://bugzilla.suse.com/1106514"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16057"
    },
    {
      "cve": "CVE-2018-16058",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16058"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16058",
          "url": "https://www.suse.com/security/cve/CVE-2018-16058"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106514 for CVE-2018-16058",
          "url": "https://bugzilla.suse.com/1106514"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16058"
    },
    {
      "cve": "CVE-2018-18225",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18225"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18225",
          "url": "https://www.suse.com/security/cve/CVE-2018-18225"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1111647 for CVE-2018-18225",
          "url": "https://bugzilla.suse.com/1111647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-18225"
    },
    {
      "cve": "CVE-2018-18226",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18226"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18226",
          "url": "https://www.suse.com/security/cve/CVE-2018-18226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1111647 for CVE-2018-18226",
          "url": "https://bugzilla.suse.com/1111647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-18226"
    },
    {
      "cve": "CVE-2018-18227",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18227"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18227",
          "url": "https://www.suse.com/security/cve/CVE-2018-18227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1111647 for CVE-2018-18227",
          "url": "https://bugzilla.suse.com/1111647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-18227"
    },
    {
      "cve": "CVE-2018-19622",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19622"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19622",
          "url": "https://www.suse.com/security/cve/CVE-2018-19622"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19622",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19622"
    },
    {
      "cve": "CVE-2018-19623",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19623"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19623",
          "url": "https://www.suse.com/security/cve/CVE-2018-19623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19623",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19623"
    },
    {
      "cve": "CVE-2018-19624",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19624"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19624",
          "url": "https://www.suse.com/security/cve/CVE-2018-19624"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19624",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19624"
    },
    {
      "cve": "CVE-2018-19625",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19625"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19625",
          "url": "https://www.suse.com/security/cve/CVE-2018-19625"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19625",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19625"
    },
    {
      "cve": "CVE-2018-19626",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19626"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding \u0027\\0\u0027 termination.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19626",
          "url": "https://www.suse.com/security/cve/CVE-2018-19626"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19626",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19626"
    },
    {
      "cve": "CVE-2018-19627",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19627"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19627",
          "url": "https://www.suse.com/security/cve/CVE-2018-19627"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19627",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19627"
    },
    {
      "cve": "CVE-2018-19628",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19628"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19628",
          "url": "https://www.suse.com/security/cve/CVE-2018-19628"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117740 for CVE-2018-19628",
          "url": "https://bugzilla.suse.com/1117740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-19628"
    },
    {
      "cve": "CVE-2019-10894",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10894"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10894",
          "url": "https://www.suse.com/security/cve/CVE-2019-10894"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10894",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10894",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10894",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10894"
    },
    {
      "cve": "CVE-2019-10895",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10895"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10895",
          "url": "https://www.suse.com/security/cve/CVE-2019-10895"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10895",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10895",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10895",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10895"
    },
    {
      "cve": "CVE-2019-10896",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10896"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10896",
          "url": "https://www.suse.com/security/cve/CVE-2019-10896"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10896",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10896",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10896",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10896"
    },
    {
      "cve": "CVE-2019-10897",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10897"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10897",
          "url": "https://www.suse.com/security/cve/CVE-2019-10897"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10897",
          "url": "https://bugzilla.suse.com/1131941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10897"
    },
    {
      "cve": "CVE-2019-10898",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10898"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10898",
          "url": "https://www.suse.com/security/cve/CVE-2019-10898"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10898",
          "url": "https://bugzilla.suse.com/1131941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10898"
    },
    {
      "cve": "CVE-2019-10899",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10899"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10899",
          "url": "https://www.suse.com/security/cve/CVE-2019-10899"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10899",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10899",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10899",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10899"
    },
    {
      "cve": "CVE-2019-10900",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10900"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10900",
          "url": "https://www.suse.com/security/cve/CVE-2019-10900"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10900",
          "url": "https://bugzilla.suse.com/1131941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10900"
    },
    {
      "cve": "CVE-2019-10901",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10901"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10901",
          "url": "https://www.suse.com/security/cve/CVE-2019-10901"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10901",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10901",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10901",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10901"
    },
    {
      "cve": "CVE-2019-10902",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10902"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10902",
          "url": "https://www.suse.com/security/cve/CVE-2019-10902"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10902",
          "url": "https://bugzilla.suse.com/1131941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10902"
    },
    {
      "cve": "CVE-2019-10903",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10903"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10903",
          "url": "https://www.suse.com/security/cve/CVE-2019-10903"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131941 for CVE-2019-10903",
          "url": "https://bugzilla.suse.com/1131941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131943 for CVE-2019-10903",
          "url": "https://bugzilla.suse.com/1131943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131945 for CVE-2019-10903",
          "url": "https://bugzilla.suse.com/1131945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10903"
    },
    {
      "cve": "CVE-2019-13619",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13619"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13619",
          "url": "https://www.suse.com/security/cve/CVE-2019-13619"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141980 for CVE-2019-13619",
          "url": "https://bugzilla.suse.com/1141980"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13619"
    },
    {
      "cve": "CVE-2019-16319",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16319"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16319",
          "url": "https://www.suse.com/security/cve/CVE-2019-16319"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150690 for CVE-2019-16319",
          "url": "https://bugzilla.suse.com/1150690"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16319"
    },
    {
      "cve": "CVE-2019-19553",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19553"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19553",
          "url": "https://www.suse.com/security/cve/CVE-2019-19553"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158505 for CVE-2019-19553",
          "url": "https://bugzilla.suse.com/1158505"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19553"
    },
    {
      "cve": "CVE-2019-5716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5716",
          "url": "https://www.suse.com/security/cve/CVE-2019-5716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121231 for CVE-2019-5716",
          "url": "https://bugzilla.suse.com/1121231"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5716"
    },
    {
      "cve": "CVE-2019-5717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5717",
          "url": "https://www.suse.com/security/cve/CVE-2019-5717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121232 for CVE-2019-5717",
          "url": "https://bugzilla.suse.com/1121232"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5717"
    },
    {
      "cve": "CVE-2019-5718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5718",
          "url": "https://www.suse.com/security/cve/CVE-2019-5718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121233 for CVE-2019-5718",
          "url": "https://bugzilla.suse.com/1121233"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5718"
    },
    {
      "cve": "CVE-2019-5719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5719",
          "url": "https://www.suse.com/security/cve/CVE-2019-5719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121234 for CVE-2019-5719",
          "url": "https://bugzilla.suse.com/1121234"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5719"
    },
    {
      "cve": "CVE-2019-5721",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5721"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5721",
          "url": "https://www.suse.com/security/cve/CVE-2019-5721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1121235 for CVE-2019-5721",
          "url": "https://bugzilla.suse.com/1121235"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5721"
    },
    {
      "cve": "CVE-2019-9208",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9208"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9208",
          "url": "https://www.suse.com/security/cve/CVE-2019-9208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127370 for CVE-2019-9208",
          "url": "https://bugzilla.suse.com/1127370"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9208"
    },
    {
      "cve": "CVE-2019-9209",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9209"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9209",
          "url": "https://www.suse.com/security/cve/CVE-2019-9209"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127369 for CVE-2019-9209",
          "url": "https://bugzilla.suse.com/1127369"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9209"
    },
    {
      "cve": "CVE-2019-9214",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9214"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9214",
          "url": "https://www.suse.com/security/cve/CVE-2019-9214"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127367 for CVE-2019-9214",
          "url": "https://bugzilla.suse.com/1127367"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9214"
    },
    {
      "cve": "CVE-2020-7044",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-7044"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using \u003e= and \u003c= to resolve off-by-one errors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-7044",
          "url": "https://www.suse.com/security/cve/CVE-2020-7044"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161052 for CVE-2020-7044",
          "url": "https://bugzilla.suse.com/1161052"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-7044"
    },
    {
      "cve": "CVE-2020-9428",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-9428"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-9428",
          "url": "https://www.suse.com/security/cve/CVE-2020-9428"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165241 for CVE-2020-9428",
          "url": "https://bugzilla.suse.com/1165241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-9428"
    },
    {
      "cve": "CVE-2020-9429",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-9429"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-9429",
          "url": "https://www.suse.com/security/cve/CVE-2020-9429"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165241 for CVE-2020-9429",
          "url": "https://bugzilla.suse.com/1165241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-9429"
    },
    {
      "cve": "CVE-2020-9430",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-9430"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-9430",
          "url": "https://www.suse.com/security/cve/CVE-2020-9430"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165241 for CVE-2020-9430",
          "url": "https://bugzilla.suse.com/1165241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-9430"
    },
    {
      "cve": "CVE-2020-9431",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-9431"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
          "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-9431",
          "url": "https://www.suse.com/security/cve/CVE-2020-9431"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165241 for CVE-2020-9431",
          "url": "https://bugzilla.suse.com/1165241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb-devel-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libmaxminddb0-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libmaxminddb0-32bit-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:libspandsp2-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libspandsp2-32bit-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwireshark13-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwiretap10-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:libwsutil11-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:mmdblookup-1.4.2-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:spandsp-devel-0.0.6-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:spandsp-doc-0.0.6-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-devel-3.2.2-lp151.2.9.1.x86_64",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.i586",
            "openSUSE Leap 15.1:wireshark-ui-qt-3.2.2-lp151.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-19T19:19:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-9431"
    }
  ]
}

cve-2018-19622

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-54.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b7555d32d11862f0e500ec466ad6bfe54190076	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.417Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-54.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b7555d32d11862f0e500ec466ad6bfe54190076"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-54.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b7555d32d11862f0e500ec466ad6bfe54190076"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19622",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-54.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-54.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b7555d32d11862f0e500ec466ad6bfe54190076",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b7555d32d11862f0e500ec466ad6bfe54190076"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19622",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.417Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-5716

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.

References

▼	URL	Tags
	https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/106482	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2b2eea1793dbff813896e1ae9dff1bedb39ee010	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-01.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.348Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
          },
          {
            "name": "106482",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106482"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2b2eea1793dbff813896e1ae9dff1bedb39ee010"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-01.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:38",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
        },
        {
          "name": "106482",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106482"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2b2eea1793dbff813896e1ae9dff1bedb39ee010"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-01.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5716",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
            },
            {
              "name": "106482",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106482"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2b2eea1793dbff813896e1ae9dff1bedb39ee010",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2b2eea1793dbff813896e1ae9dff1bedb39ee010"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-01.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-01.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15217"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5716",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14367

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:29

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-42.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:51.054Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-42.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:19",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-42.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14367",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-42.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-42.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14367",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:29:51.054Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10897

Vulnerability from cvelistv5

Published

2019-04-09 03:52

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-11.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d	x_refsource_MISC
	http://www.securityfocus.com/bid/107836	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.163Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-11.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d"
          },
          {
            "name": "107836",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107836"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:08",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-11.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d"
        },
        {
          "name": "107836",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107836"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10897",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-11.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-11.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d"
            },
            {
              "name": "107836",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107836"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10897",
    "datePublished": "2019-04-09T03:52:14",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.163Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16057

Vulnerability from cvelistv5

Published

2018-08-30 01:00

Modified

2024-08-05 10:10

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations.

References

▼	URL	Tags
	https://www.debian.org/security/2018/dsa-4315	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/105174	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041609	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://www.wireshark.org/security/wnpa-sec-2018-46.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bbf46eb46ae38392af8e6cd288795f0def50a621	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:10:06.054Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4315",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4315"
          },
          {
            "name": "105174",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105174"
          },
          {
            "name": "1041609",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041609"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-46.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bbf46eb46ae38392af8e6cd288795f0def50a621"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-07T18:17:25",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4315",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4315"
        },
        {
          "name": "105174",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105174"
        },
        {
          "name": "1041609",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041609"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-46.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bbf46eb46ae38392af8e6cd288795f0def50a621"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16057",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4315",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4315"
            },
            {
              "name": "105174",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105174"
            },
            {
              "name": "1041609",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041609"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-46.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-46.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bbf46eb46ae38392af8e6cd288795f0def50a621",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bbf46eb46ae38392af8e6cd288795f0def50a621"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16057",
    "datePublished": "2018-08-30T01:00:00",
    "dateReserved": "2018-08-28T00:00:00",
    "dateUpdated": "2024-08-05T10:10:06.054Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-11359

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beaebe91b14564fb9f86f0726bab09927872721b	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-33.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.501Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beaebe91b14564fb9f86f0726bab09927872721b"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-33.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:06",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beaebe91b14564fb9f86f0726bab09927872721b"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-33.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11359",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14703"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=beaebe91b14564fb9f86f0726bab09927872721b",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=beaebe91b14564fb9f86f0726bab09927872721b"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-33.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-33.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11359",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.501Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10895

Vulnerability from cvelistv5

Published

2019-04-09 03:50

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-09.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.290Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-09.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:10",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-09.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10895",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-09.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-09.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2fbbde780e5d5d82e31dca656217daf278cf62bb",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2fbbde780e5d5d82e31dca656217daf278cf62bb"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10895",
    "datePublished": "2019-04-09T03:50:45",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.290Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10903

Vulnerability from cvelistv5

Published

2019-04-09 03:53

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-18.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eafdcfa4b6d5187a5326442a82608ab03d9dddcb	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-18.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eafdcfa4b6d5187a5326442a82608ab03d9dddcb"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:07",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-18.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eafdcfa4b6d5187a5326442a82608ab03d9dddcb"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10903",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-18.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-18.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=eafdcfa4b6d5187a5326442a82608ab03d9dddcb",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=eafdcfa4b6d5187a5326442a82608ab03d9dddcb"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10903",
    "datePublished": "2019-04-09T03:53:43",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-5721

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-05.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.131Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-05.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:09",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-05.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5721",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-05.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-05.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5721",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.131Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2020-7044

Vulnerability from cvelistv5

Published

2020-01-16 03:05

Modified

2024-08-04 09:18

Severity ?

Summary

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-01.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f90a3720b73ca140403315126e2a478c4f70ca03	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:18:02.903Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-01.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f90a3720b73ca140403315126e2a478c4f70ca03"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          },
          {
            "name": "FEDORA-2020-ef943221ca",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
          },
          {
            "name": "FEDORA-2020-87737529a4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
          },
          {
            "name": "FEDORA-2020-da7dcee2ec",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using \u003e= and \u003c= to resolve off-by-one errors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-25T06:06:21",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-01.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f90a3720b73ca140403315126e2a478c4f70ca03"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        },
        {
          "name": "FEDORA-2020-ef943221ca",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
        },
        {
          "name": "FEDORA-2020-87737529a4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
        },
        {
          "name": "FEDORA-2020-da7dcee2ec",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-7044",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using \u003e= and \u003c= to resolve off-by-one errors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-01.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-01.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f90a3720b73ca140403315126e2a478c4f70ca03",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f90a3720b73ca140403315126e2a478c4f70ca03"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            },
            {
              "name": "FEDORA-2020-ef943221ca",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
            },
            {
              "name": "FEDORA-2020-87737529a4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
            },
            {
              "name": "FEDORA-2020-da7dcee2ec",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-7044",
    "datePublished": "2020-01-16T03:05:59",
    "dateReserved": "2020-01-14T00:00:00",
    "dateUpdated": "2024-08-04T09:18:02.903Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-11357

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ab8a33ef083b9732c89117747a83a905a676faf6	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-28.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.286Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ab8a33ef083b9732c89117747a83a905a676faf6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-28.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:42",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ab8a33ef083b9732c89117747a83a905a676faf6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-28.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11357",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=ab8a33ef083b9732c89117747a83a905a676faf6",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=ab8a33ef083b9732c89117747a83a905a676faf6"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-28.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-28.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11357",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.286Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14342

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=36af43dbb7673495948cd65d0346e8b9812b941c	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-34.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.652Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=36af43dbb7673495948cd65d0346e8b9812b941c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-34.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:43",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=36af43dbb7673495948cd65d0346e8b9812b941c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-34.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14342",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=36af43dbb7673495948cd65d0346e8b9812b941c",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=36af43dbb7673495948cd65d0346e8b9812b941c"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-34.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-34.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14342",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.652Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-5717

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-02.html	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bf9272a92f3df1e4ccfaad434e123222ae5313f7	x_refsource_MISC
	http://www.securityfocus.com/bid/106482	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.269Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-02.html"
          },
          {
            "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bf9272a92f3df1e4ccfaad434e123222ae5313f7"
          },
          {
            "name": "106482",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106482"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:39",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-02.html"
        },
        {
          "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bf9272a92f3df1e4ccfaad434e123222ae5313f7"
        },
        {
          "name": "106482",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106482"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5717",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-02.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-02.html"
            },
            {
              "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bf9272a92f3df1e4ccfaad434e123222ae5313f7",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bf9272a92f3df1e4ccfaad434e123222ae5313f7"
            },
            {
              "name": "106482",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106482"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5717",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.269Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-11356

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-29.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4425716ddba99374749bd033d9bc0f4add2fb973	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.316Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-29.html"
          },
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4425716ddba99374749bd033d9bc0f4add2fb973"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:28",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-29.html"
        },
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4425716ddba99374749bd033d9bc0f4add2fb973"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11356",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-29.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-29.html"
            },
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4425716ddba99374749bd033d9bc0f4add2fb973",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4425716ddba99374749bd033d9bc0f4add2fb973"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11356",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.316Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-18225

Vulnerability from cvelistv5

Published

2018-10-12 05:00

Modified

2024-08-05 11:01

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1041909	vdb-entry, x_refsource_SECTRACK
	https://www.wireshark.org/security/wnpa-sec-2018-49.html	x_refsource_MISC
	http://www.securityfocus.com/bid/105583	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:14.849Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041909",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041909"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-49.html"
          },
          {
            "name": "105583",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105583"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-07T18:22:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041909",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041909"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-49.html"
        },
        {
          "name": "105583",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105583"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-18225",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041909",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041909"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-49.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-49.html"
            },
            {
              "name": "105583",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105583"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-18225",
    "datePublished": "2018-10-12T05:00:00",
    "dateReserved": "2018-10-10T00:00:00",
    "dateUpdated": "2024-08-05T11:01:14.849Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16056

Vulnerability from cvelistv5

Published

2018-08-30 01:00

Modified

2024-08-05 10:10

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4315	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/105174	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041609	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2018-45.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:10:05.795Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485"
          },
          {
            "name": "DSA-4315",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4315"
          },
          {
            "name": "105174",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105174"
          },
          {
            "name": "1041609",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041609"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-45.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485"
        },
        {
          "name": "DSA-4315",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4315"
        },
        {
          "name": "105174",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105174"
        },
        {
          "name": "1041609",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041609"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-45.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16056",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f98fbce64cb230e94a2cafc410a3cedad657b485",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f98fbce64cb230e94a2cafc410a3cedad657b485"
            },
            {
              "name": "DSA-4315",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4315"
            },
            {
              "name": "105174",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105174"
            },
            {
              "name": "1041609",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041609"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-45.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-45.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16056",
    "datePublished": "2018-08-30T01:00:00",
    "dateReserved": "2018-08-28T00:00:00",
    "dateUpdated": "2024-08-05T10:10:05.795Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-19626

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-52.html	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5a65115ebab55cfd5ce0a855c2256e01cab6449	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.416Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-52.html"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5a65115ebab55cfd5ce0a855c2256e01cab6449"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding \u0027\\0\u0027 termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-52.html"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5a65115ebab55cfd5ce0a855c2256e01cab6449"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19626",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding \u0027\\0\u0027 termination."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-52.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-52.html"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c5a65115ebab55cfd5ce0a855c2256e01cab6449",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c5a65115ebab55cfd5ce0a855c2256e01cab6449"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19626",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.416Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-11354

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

Summary

In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://www.wireshark.org/security/wnpa-sec-2018-26.html	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cb517a4a434387e74a2f75ebb106ee3c3893251c	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.371Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-26.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cb517a4a434387e74a2f75ebb106ee3c3893251c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:23",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-26.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cb517a4a434387e74a2f75ebb106ee3c3893251c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11354",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-26.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-26.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cb517a4a434387e74a2f75ebb106ee3c3893251c",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cb517a4a434387e74a2f75ebb106ee3c3893251c"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14647"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11354",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.371Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-12086

Vulnerability from cvelistv5

Published

2018-09-14 21:00

Modified

2024-08-05 08:24

Severity ?

Summary

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1041909	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/105538	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:24:03.683Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041909",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041909"
          },
          {
            "name": "105538",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105538"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:14",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041909",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041909"
        },
        {
          "name": "105538",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105538"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-12086",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041909",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041909"
            },
            {
              "name": "105538",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105538"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf",
              "refsource": "CONFIRM",
              "url": "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-12086",
    "datePublished": "2018-09-14T21:00:00",
    "dateReserved": "2018-06-09T00:00:00",
    "dateUpdated": "2024-08-05T08:24:03.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-11355

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

Summary

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-27.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=99d27a5fd2c540f837154aca3b3647f5ccfa0c33	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.353Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-27.html"
          },
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=99d27a5fd2c540f837154aca3b3647f5ccfa0c33"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:17",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-27.html"
        },
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=99d27a5fd2c540f837154aca3b3647f5ccfa0c33"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11355",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-27.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-27.html"
            },
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=99d27a5fd2c540f837154aca3b3647f5ccfa0c33",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=99d27a5fd2c540f837154aca3b3647f5ccfa0c33"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11355",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.353Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10902

Vulnerability from cvelistv5

Published

2019-04-09 03:53

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-16.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=95571f17d5e2de39735e62e5251583f930c06d51	x_refsource_MISC
	http://www.securityfocus.com/bid/107836	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.193Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-16.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=95571f17d5e2de39735e62e5251583f930c06d51"
          },
          {
            "name": "107836",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107836"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:51",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-16.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=95571f17d5e2de39735e62e5251583f930c06d51"
        },
        {
          "name": "107836",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107836"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10902",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-16.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-16.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=95571f17d5e2de39735e62e5251583f930c06d51",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=95571f17d5e2de39735e62e5251583f930c06d51"
            },
            {
              "name": "107836",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107836"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10902",
    "datePublished": "2019-04-09T03:53:25",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.193Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10896

Vulnerability from cvelistv5

Published

2019-04-09 03:50

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-15.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=441b6d9071d6341e58dfe10719375489c5b8e3f0	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.129Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-15.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=441b6d9071d6341e58dfe10719375489c5b8e3f0"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:08",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-15.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=441b6d9071d6341e58dfe10719375489c5b8e3f0"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10896",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-15.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-15.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=441b6d9071d6341e58dfe10719375489c5b8e3f0",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=441b6d9071d6341e58dfe10719375489c5b8e3f0"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10896",
    "datePublished": "2019-04-09T03:50:58",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10898

Vulnerability from cvelistv5

Published

2019-04-09 03:52

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-12.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f80b7d1b279fb6c13f640019a1bbc42b18bf7469	x_refsource_MISC
	http://www.securityfocus.com/bid/107836	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.040Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-12.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f80b7d1b279fb6c13f640019a1bbc42b18bf7469"
          },
          {
            "name": "107836",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107836"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:18",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-12.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f80b7d1b279fb6c13f640019a1bbc42b18bf7469"
        },
        {
          "name": "107836",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107836"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10898",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-12.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-12.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f80b7d1b279fb6c13f640019a1bbc42b18bf7469",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f80b7d1b279fb6c13f640019a1bbc42b18bf7469"
            },
            {
              "name": "107836",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107836"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10898",
    "datePublished": "2019-04-09T03:52:25",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14340

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-36.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=672d882a53f96730e4ef1e5b1639c585823b0df8	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.627Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-36.html"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=672d882a53f96730e4ef1e5b1639c585823b0df8"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:26",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-36.html"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=672d882a53f96730e4ef1e5b1639c585823b0df8"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14340",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-36.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-36.html"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=672d882a53f96730e4ef1e5b1639c585823b0df8",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=672d882a53f96730e4ef1e5b1639c585823b0df8"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14340",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.627Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-9208

Vulnerability from cvelistv5

Published

2019-02-28 04:00

Modified

2024-08-04 21:38

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/107203	vdb-entry, x_refsource_BID
	https://www.wireshark.org/security/wnpa-sec-2019-07.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpujan2020.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:38:46.612Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "107203",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107203"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-07.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2019:1108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:04",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "107203",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107203"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-07.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2019:1108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-9208",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "107203",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107203"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-07.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-07.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2019:1108",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujan2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-9208",
    "datePublished": "2019-02-28T04:00:00",
    "dateReserved": "2019-02-26T00:00:00",
    "dateUpdated": "2024-08-04T21:38:46.612Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14339

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b77c0a596a8071aebc1de71e3f79e5e15e919ca	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://www.wireshark.org/security/wnpa-sec-2018-38.html	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.582Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b77c0a596a8071aebc1de71e3f79e5e15e919ca"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-38.html"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b77c0a596a8071aebc1de71e3f79e5e15e919ca"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-38.html"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14339",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b77c0a596a8071aebc1de71e3f79e5e15e919ca",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b77c0a596a8071aebc1de71e3f79e5e15e919ca"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-38.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-38.html"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14339",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-11361

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

Summary

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1b52f9929238ce3948ec924ae4f9456b5e9df558	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-32.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.325Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1b52f9929238ce3948ec924ae4f9456b5e9df558"
          },
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-32.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:41",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1b52f9929238ce3948ec924ae4f9456b5e9df558"
        },
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-32.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11361",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1b52f9929238ce3948ec924ae4f9456b5e9df558",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1b52f9929238ce3948ec924ae4f9456b5e9df558"
            },
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-32.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-32.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11361",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.325Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10901

Vulnerability from cvelistv5

Published

2019-04-09 03:53

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-17.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.280Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-17.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:10",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-17.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10901",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-17.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-17.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10901",
    "datePublished": "2019-04-09T03:53:11",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.280Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14369

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:29

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=038cd225bfa54e2a7ade4043118796334920a61e	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-41.html	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:50.595Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=038cd225bfa54e2a7ade4043118796334920a61e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-41.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:07",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=038cd225bfa54e2a7ade4043118796334920a61e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-41.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14369",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=038cd225bfa54e2a7ade4043118796334920a61e",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=038cd225bfa54e2a7ade4043118796334920a61e"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-41.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-41.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14369",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:29:50.595Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-9209

Vulnerability from cvelistv5

Published

2019-02-28 04:00

Modified

2024-08-04 21:38

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b	x_refsource_MISC
	http://www.securityfocus.com/bid/107203	vdb-entry, x_refsource_BID
	https://www.wireshark.org/security/wnpa-sec-2019-06.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:38:46.552Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b"
          },
          {
            "name": "107203",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107203"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-06.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "[debian-lts-announce] 20190325 [SECURITY] [DLA 1729-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html"
          },
          {
            "name": "openSUSE-SU-2019:1108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:34",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b"
        },
        {
          "name": "107203",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107203"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-06.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "[debian-lts-announce] 20190325 [SECURITY] [DLA 1729-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html"
        },
        {
          "name": "openSUSE-SU-2019:1108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-9209",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b"
            },
            {
              "name": "107203",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107203"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-06.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-06.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "[debian-lts-announce] 20190325 [SECURITY] [DLA 1729-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html"
            },
            {
              "name": "openSUSE-SU-2019:1108",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-9209",
    "datePublished": "2019-02-28T04:00:00",
    "dateReserved": "2019-02-26T00:00:00",
    "dateUpdated": "2024-08-04T21:38:46.552Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-19624

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-56.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3e319db1107b08fc3be804b6d449143ec9aa0dec	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.319Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-56.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3e319db1107b08fc3be804b6d449143ec9aa0dec"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-56.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3e319db1107b08fc3be804b6d449143ec9aa0dec"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19624",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-56.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-56.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3e319db1107b08fc3be804b6d449143ec9aa0dec",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3e319db1107b08fc3be804b6d449143ec9aa0dec"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19624",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-19623

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-53.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9c8645ec7b28e4d7193962ecd2a418613bf6a84f	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.332Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-53.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9c8645ec7b28e4d7193962ecd2a418613bf6a84f"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-53.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9c8645ec7b28e4d7193962ecd2a418613bf6a84f"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19623",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-53.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-53.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9c8645ec7b28e4d7193962ecd2a418613bf6a84f",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9c8645ec7b28e4d7193962ecd2a418613bf6a84f"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19623",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.332Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-5718

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373	x_refsource_MISC
	http://www.securityfocus.com/bid/106482	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-03.html	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	https://www.oracle.com/security-alerts/cpujan2020.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.276Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373"
          },
          {
            "name": "106482",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106482"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-03.html"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:29",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373"
        },
        {
          "name": "106482",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106482"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-03.html"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5718",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373"
            },
            {
              "name": "106482",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106482"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-03.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-03.html"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujan2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5718",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2020-9429

Vulnerability from cvelistv5

Published

2020-02-27 22:06

Modified

2024-08-04 10:26

Severity ?

Summary

In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-06.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2530f740d67d41908e84434bb5ec99480c2ac2e	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/202007-13	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:26:16.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-06.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2530f740d67d41908e84434bb5ec99480c2ac2e"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "GLSA-202007-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-27T01:06:20",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-06.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2530f740d67d41908e84434bb5ec99480c2ac2e"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "GLSA-202007-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-13"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-9429",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-06.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-06.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a2530f740d67d41908e84434bb5ec99480c2ac2e",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a2530f740d67d41908e84434bb5ec99480c2ac2e"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=73c5fff899f253c44a72657048aec7db6edee571",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=73c5fff899f253c44a72657048aec7db6edee571"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "GLSA-202007-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-13"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-9429",
    "datePublished": "2020-02-27T22:06:39",
    "dateReserved": "2020-02-27T00:00:00",
    "dateUpdated": "2024-08-04T10:26:16.091Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-13619

Vulnerability from cvelistv5

Published

2019-07-17 19:18

Modified

2024-08-04 23:57

Severity ?

Summary

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-20.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7e90aed666e809c0db5de9d1816802a7dcea28d9	x_refsource_MISC
	http://www.securityfocus.com/bid/109293	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00068.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JY52XAC2UNC4X4ZPIXYMK5SVXV2PO5I3/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4QVJALLGVVC7MBUT4B4SHQVDXGJKGI7/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/4133-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:57:39.523Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-20.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7e90aed666e809c0db5de9d1816802a7dcea28d9"
          },
          {
            "name": "109293",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/109293"
          },
          {
            "name": "openSUSE-SU-2019:1965",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00068.html"
          },
          {
            "name": "FEDORA-2019-70e93298e3",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JY52XAC2UNC4X4ZPIXYMK5SVXV2PO5I3/"
          },
          {
            "name": "FEDORA-2019-23f7634765",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4QVJALLGVVC7MBUT4B4SHQVDXGJKGI7/"
          },
          {
            "name": "USN-4133-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4133-1/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:47",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-20.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7e90aed666e809c0db5de9d1816802a7dcea28d9"
        },
        {
          "name": "109293",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/109293"
        },
        {
          "name": "openSUSE-SU-2019:1965",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00068.html"
        },
        {
          "name": "FEDORA-2019-70e93298e3",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JY52XAC2UNC4X4ZPIXYMK5SVXV2PO5I3/"
        },
        {
          "name": "FEDORA-2019-23f7634765",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4QVJALLGVVC7MBUT4B4SHQVDXGJKGI7/"
        },
        {
          "name": "USN-4133-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4133-1/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13619",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-20.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-20.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=7e90aed666e809c0db5de9d1816802a7dcea28d9",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=7e90aed666e809c0db5de9d1816802a7dcea28d9"
            },
            {
              "name": "109293",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/109293"
            },
            {
              "name": "openSUSE-SU-2019:1965",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00068.html"
            },
            {
              "name": "FEDORA-2019-70e93298e3",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JY52XAC2UNC4X4ZPIXYMK5SVXV2PO5I3/"
            },
            {
              "name": "FEDORA-2019-23f7634765",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q4QVJALLGVVC7MBUT4B4SHQVDXGJKGI7/"
            },
            {
              "name": "USN-4133-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4133-1/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13619",
    "datePublished": "2019-07-17T19:18:03",
    "dateReserved": "2019-07-16T00:00:00",
    "dateUpdated": "2024-08-04T23:57:39.523Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-5719

Vulnerability from cvelistv5

Published

2019-01-08 23:00

Modified

2024-08-04 20:01

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html	mailing-list, x_refsource_MLIST
	https://www.wireshark.org/security/wnpa-sec-2019-04.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5b02f2a9b8772d8814096f86c60a32889d61f2c	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:01:52.250Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374"
          },
          {
            "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-04.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5b02f2a9b8772d8814096f86c60a32889d61f2c"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:48",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374"
        },
        {
          "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-04.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5b02f2a9b8772d8814096f86c60a32889d61f2c"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5719",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374"
            },
            {
              "name": "[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-04.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-04.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b5b02f2a9b8772d8814096f86c60a32889d61f2c",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b5b02f2a9b8772d8814096f86c60a32889d61f2c"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5719",
    "datePublished": "2019-01-08T23:00:00",
    "dateReserved": "2019-01-08T00:00:00",
    "dateUpdated": "2024-08-04T20:01:52.250Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10894

Vulnerability from cvelistv5

Published

2019-04-09 03:50

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-14.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.040Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-14.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-14.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10894",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-14.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-14.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10894",
    "datePublished": "2019-04-09T03:50:22",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14368

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:29

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-40.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c44312f465014eb409d766a9828b7f101f6251c	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:50.145Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-40.html"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c44312f465014eb409d766a9828b7f101f6251c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:31",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-40.html"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c44312f465014eb409d766a9828b7f101f6251c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14368",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-40.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-40.html"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6c44312f465014eb409d766a9828b7f101f6251c",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6c44312f465014eb409d766a9828b7f101f6251c"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14368",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:29:50.145Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-9214

Vulnerability from cvelistv5

Published

2019-02-28 04:00

Modified

2024-08-04 21:38

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2019-08.html	x_refsource_MISC
	http://www.securityfocus.com/bid/107203	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c557bb0910be271e49563756411a690a1bc53ce5	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4416	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Mar/35	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:38:46.551Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-08.html"
          },
          {
            "name": "107203",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107203"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c557bb0910be271e49563756411a690a1bc53ce5"
          },
          {
            "name": "DSA-4416",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4416"
          },
          {
            "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/35"
          },
          {
            "name": "openSUSE-SU-2019:1108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:21",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-08.html"
        },
        {
          "name": "107203",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107203"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c557bb0910be271e49563756411a690a1bc53ce5"
        },
        {
          "name": "DSA-4416",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4416"
        },
        {
          "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/35"
        },
        {
          "name": "openSUSE-SU-2019:1108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-9214",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-08.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-08.html"
            },
            {
              "name": "107203",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107203"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c557bb0910be271e49563756411a690a1bc53ce5",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c557bb0910be271e49563756411a690a1bc53ce5"
            },
            {
              "name": "DSA-4416",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4416"
            },
            {
              "name": "20190324 [SECURITY] [DSA 4416-1] wireshark security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/35"
            },
            {
              "name": "openSUSE-SU-2019:1108",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-9214",
    "datePublished": "2019-02-28T04:00:00",
    "dateReserved": "2019-02-27T00:00:00",
    "dateUpdated": "2024-08-04T21:38:46.551Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10899

Vulnerability from cvelistv5

Published

2019-04-09 03:52

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-10.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b16fea2f175a3297edac118c8844c7987d31c1cb	x_refsource_MISC
	http://www.securityfocus.com/bid/107834	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3986-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-10.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b16fea2f175a3297edac118c8844c7987d31c1cb"
          },
          {
            "name": "107834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107834"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2019:1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2019:1390",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
          },
          {
            "name": "USN-3986-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3986-1/"
          },
          {
            "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T22:06:09",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-10.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b16fea2f175a3297edac118c8844c7987d31c1cb"
        },
        {
          "name": "107834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107834"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2019:1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2019:1390",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
        },
        {
          "name": "USN-3986-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3986-1/"
        },
        {
          "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10899",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-10.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-10.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b16fea2f175a3297edac118c8844c7987d31c1cb",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b16fea2f175a3297edac118c8844c7987d31c1cb"
            },
            {
              "name": "107834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107834"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2019:1356",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html"
            },
            {
              "name": "openSUSE-SU-2019:1390",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html"
            },
            {
              "name": "USN-3986-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3986-1/"
            },
            {
              "name": "[debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10899",
    "datePublished": "2019-04-09T03:52:41",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2020-9431

Vulnerability from cvelistv5

Published

2020-02-27 22:06

Modified

2024-08-04 10:26

Severity ?

Summary

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-03.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=086003c9d616906e08bbeeab9c17b3aa4c6ff850	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202007-13	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:26:16.096Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-03.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=086003c9d616906e08bbeeab9c17b3aa4c6ff850"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "FEDORA-2020-ef943221ca",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
          },
          {
            "name": "FEDORA-2020-87737529a4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
          },
          {
            "name": "FEDORA-2020-da7dcee2ec",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
          },
          {
            "name": "GLSA-202007-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-13"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:40",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-03.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=086003c9d616906e08bbeeab9c17b3aa4c6ff850"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "FEDORA-2020-ef943221ca",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
        },
        {
          "name": "FEDORA-2020-87737529a4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
        },
        {
          "name": "FEDORA-2020-da7dcee2ec",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
        },
        {
          "name": "GLSA-202007-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-13"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-9431",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-03.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-03.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=086003c9d616906e08bbeeab9c17b3aa4c6ff850",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=086003c9d616906e08bbeeab9c17b3aa4c6ff850"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "FEDORA-2020-ef943221ca",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
            },
            {
              "name": "FEDORA-2020-87737529a4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
            },
            {
              "name": "FEDORA-2020-da7dcee2ec",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
            },
            {
              "name": "GLSA-202007-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-13"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-9431",
    "datePublished": "2020-02-27T22:06:10",
    "dateReserved": "2020-02-27T00:00:00",
    "dateUpdated": "2024-08-04T10:26:16.096Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14341

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://www.wireshark.org/security/wnpa-sec-2018-39.html	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e716c32be6aa20e1813b0002878853e71f8b2f4	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.619Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-39.html"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e716c32be6aa20e1813b0002878853e71f8b2f4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:44",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-39.html"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e716c32be6aa20e1813b0002878853e71f8b2f4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14341",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-39.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-39.html"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2e716c32be6aa20e1813b0002878853e71f8b2f4",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2e716c32be6aa20e1813b0002878853e71f8b2f4"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14341",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.619Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14370

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:29

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-43.html	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b1446124eebc3ea5591d18e719c2a5cff3630638	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:51.205Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-43.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b1446124eebc3ea5591d18e719c2a5cff3630638"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:23",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-43.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b1446124eebc3ea5591d18e719c2a5cff3630638"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14370",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-43.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-43.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b1446124eebc3ea5591d18e719c2a5cff3630638",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b1446124eebc3ea5591d18e719c2a5cff3630638"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14370",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:29:51.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-18226

Vulnerability from cvelistv5

Published

2018-10-12 05:00

Modified

2024-08-05 11:01

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1041909	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171	x_refsource_MISC
	http://www.securityfocus.com/bid/105583	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://www.wireshark.org/security/wnpa-sec-2018-48.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:15.077Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041909",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041909"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171"
          },
          {
            "name": "105583",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105583"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-48.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:20",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1041909",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041909"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171"
        },
        {
          "name": "105583",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105583"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-48.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-18226",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041909",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041909"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171"
            },
            {
              "name": "105583",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105583"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-48.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-48.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-18226",
    "datePublished": "2018-10-12T05:00:00",
    "dateReserved": "2018-10-10T00:00:00",
    "dateUpdated": "2024-08-05T11:01:15.077Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-10900

Vulnerability from cvelistv5

Published

2019-04-09 03:52

Modified

2024-08-04 22:40

Severity ?

Summary

In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-13.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=26eee01f57f0a86fb375892c7937eac24ede4610	x_refsource_MISC
	http://www.securityfocus.com/bid/107836	vdb-entry, x_refsource_BID
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.119Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-13.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=26eee01f57f0a86fb375892c7937eac24ede4610"
          },
          {
            "name": "107836",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107836"
          },
          {
            "name": "FEDORA-2019-aef1dac6a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
          },
          {
            "name": "FEDORA-2019-77b2d840ef",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:32",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-13.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=26eee01f57f0a86fb375892c7937eac24ede4610"
        },
        {
          "name": "107836",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107836"
        },
        {
          "name": "FEDORA-2019-aef1dac6a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
        },
        {
          "name": "FEDORA-2019-77b2d840ef",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10900",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-13.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-13.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=26eee01f57f0a86fb375892c7937eac24ede4610",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=26eee01f57f0a86fb375892c7937eac24ede4610"
            },
            {
              "name": "107836",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107836"
            },
            {
              "name": "FEDORA-2019-aef1dac6a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/"
            },
            {
              "name": "FEDORA-2019-77b2d840ef",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10900",
    "datePublished": "2019-04-09T03:52:55",
    "dateReserved": "2019-04-05T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-18227

Vulnerability from cvelistv5

Published

2018-10-12 05:00

Modified

2024-08-05 11:01

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2018-47.html	x_refsource_MISC
	http://www.securitytracker.com/id/1041909	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/105583	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d443be449a52f95df5754adc39e1f3472fec2f03	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:15.123Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-47.html"
          },
          {
            "name": "1041909",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041909"
          },
          {
            "name": "105583",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105583"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d443be449a52f95df5754adc39e1f3472fec2f03"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:44",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-47.html"
        },
        {
          "name": "1041909",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041909"
        },
        {
          "name": "105583",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105583"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d443be449a52f95df5754adc39e1f3472fec2f03"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-18227",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-47.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-47.html"
            },
            {
              "name": "1041909",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041909"
            },
            {
              "name": "105583",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105583"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=d443be449a52f95df5754adc39e1f3472fec2f03",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=d443be449a52f95df5754adc39e1f3472fec2f03"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-18227",
    "datePublished": "2018-10-12T05:00:00",
    "dateReserved": "2018-10-10T00:00:00",
    "dateUpdated": "2024-08-05T11:01:15.123Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14344

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f7153685b39a164aea09ba7f96ebb648b8328ae	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-35.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.608Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f7153685b39a164aea09ba7f96ebb648b8328ae"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-35.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:22",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f7153685b39a164aea09ba7f96ebb648b8328ae"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-35.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14344",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4f7153685b39a164aea09ba7f96ebb648b8328ae",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4f7153685b39a164aea09ba7f96ebb648b8328ae"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-35.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-35.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14344",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.608Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-11358

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-31.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4217	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ccb1ac3c8cec47fbbbf2e80ced80644005c65252	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.402Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-31.html"
          },
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689"
          },
          {
            "name": "DSA-4217",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ccb1ac3c8cec47fbbbf2e80ced80644005c65252"
          },
          {
            "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:49",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-31.html"
        },
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689"
        },
        {
          "name": "DSA-4217",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ccb1ac3c8cec47fbbbf2e80ced80644005c65252"
        },
        {
          "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11358",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-31.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-31.html"
            },
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14689"
            },
            {
              "name": "DSA-4217",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4217"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=ccb1ac3c8cec47fbbbf2e80ced80644005c65252",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=ccb1ac3c8cec47fbbbf2e80ced80644005c65252"
            },
            {
              "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11358",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.402Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2020-9430

Vulnerability from cvelistv5

Published

2020-02-27 22:06

Modified

2024-08-04 10:26

Severity ?

Summary

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-04.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=93d6b03a67953b82880cdbdcf0d30e2a3246d790	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6b98dc63701b1da1cc7681cb383dabb0b7007d73	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202007-13	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:26:16.188Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-04.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=93d6b03a67953b82880cdbdcf0d30e2a3246d790"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6b98dc63701b1da1cc7681cb383dabb0b7007d73"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "FEDORA-2020-ef943221ca",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
          },
          {
            "name": "FEDORA-2020-87737529a4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
          },
          {
            "name": "FEDORA-2020-da7dcee2ec",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
          },
          {
            "name": "GLSA-202007-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-13"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:42",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-04.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=93d6b03a67953b82880cdbdcf0d30e2a3246d790"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6b98dc63701b1da1cc7681cb383dabb0b7007d73"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "FEDORA-2020-ef943221ca",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
        },
        {
          "name": "FEDORA-2020-87737529a4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
        },
        {
          "name": "FEDORA-2020-da7dcee2ec",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
        },
        {
          "name": "GLSA-202007-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-13"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-9430",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-04.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-04.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=93d6b03a67953b82880cdbdcf0d30e2a3246d790",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=93d6b03a67953b82880cdbdcf0d30e2a3246d790"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6b98dc63701b1da1cc7681cb383dabb0b7007d73",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6b98dc63701b1da1cc7681cb383dabb0b7007d73"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "FEDORA-2020-ef943221ca",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
            },
            {
              "name": "FEDORA-2020-87737529a4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
            },
            {
              "name": "FEDORA-2020-da7dcee2ec",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
            },
            {
              "name": "GLSA-202007-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-13"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-9430",
    "datePublished": "2020-02-27T22:06:26",
    "dateReserved": "2020-02-27T00:00:00",
    "dateUpdated": "2024-08-04T10:26:16.188Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-11362

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4217	vendor-advisory, x_refsource_DEBIAN
	https://www.wireshark.org/security/wnpa-sec-2018-25.html	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f177008b04a530640de835ca878892e58b826d58	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.316Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615"
          },
          {
            "name": "DSA-4217",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-25.html"
          },
          {
            "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f177008b04a530640de835ca878892e58b826d58"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing \u0027\\0\u0027 character."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:10",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615"
        },
        {
          "name": "DSA-4217",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-25.html"
        },
        {
          "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f177008b04a530640de835ca878892e58b826d58"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11362",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing \u0027\\0\u0027 character."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14615"
            },
            {
              "name": "DSA-4217",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4217"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-25.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-25.html"
            },
            {
              "name": "[debian-lts-announce] 20180528 [SECURITY] [DLA 1388-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f177008b04a530640de835ca878892e58b826d58",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f177008b04a530640de835ca878892e58b826d58"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11362",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.316Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16058

Vulnerability from cvelistv5

Published

2018-08-30 01:00

Modified

2024-08-05 10:10

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure.

References

▼	URL	Tags
	https://www.debian.org/security/2018/dsa-4315	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/105174	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041609	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c48d6a6d60c5c9111838a945966b6cb8750777be	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2018-44.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:10:05.803Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4315",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4315"
          },
          {
            "name": "105174",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105174"
          },
          {
            "name": "1041609",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041609"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c48d6a6d60c5c9111838a945966b6cb8750777be"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-44.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:46",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4315",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4315"
        },
        {
          "name": "105174",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105174"
        },
        {
          "name": "1041609",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041609"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c48d6a6d60c5c9111838a945966b6cb8750777be"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-44.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16058",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4315",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4315"
            },
            {
              "name": "105174",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105174"
            },
            {
              "name": "1041609",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041609"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c48d6a6d60c5c9111838a945966b6cb8750777be",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c48d6a6d60c5c9111838a945966b6cb8750777be"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-44.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-44.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16058",
    "datePublished": "2018-08-30T01:00:00",
    "dateReserved": "2018-08-28T00:00:00",
    "dateUpdated": "2024-08-05T10:10:05.803Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-11360

Vulnerability from cvelistv5

Published

2018-05-22 21:00

Modified

2024-08-05 08:10

Severity ?

Summary

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/104308	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4217	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2018-30.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041036	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:10:13.325Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104308",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104308"
          },
          {
            "name": "DSA-4217",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-30.html"
          },
          {
            "name": "1041036",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041036"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:43",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "104308",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104308"
        },
        {
          "name": "DSA-4217",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-30.html"
        },
        {
          "name": "1041036",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041036"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-11360",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104308",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104308"
            },
            {
              "name": "DSA-4217",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4217"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a55b36c51f83a7b9680824e8ee3a6ce8429ab24b"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-30.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-30.html"
            },
            {
              "name": "1041036",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041036"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14688"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-11360",
    "datePublished": "2018-05-22T21:00:00",
    "dateReserved": "2018-05-21T00:00:00",
    "dateUpdated": "2024-08-05T08:10:13.325Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-19627

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60	x_refsource_MISC
	https://www.exploit-db.com/exploits/45951/	exploit, x_refsource_EXPLOIT-DB
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	https://www.wireshark.org/security/wnpa-sec-2018-55.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.329Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60"
          },
          {
            "name": "45951",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/45951/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-55.html"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60"
        },
        {
          "name": "45951",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/45951/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-55.html"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19627",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60"
            },
            {
              "name": "45951",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/45951/"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-55.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-55.html"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19627",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-19628

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2018-57.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=212b18825d9b668cda23d334c48867dfa66b2b36	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.435Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-57.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=212b18825d9b668cda23d334c48867dfa66b2b36"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-57.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=212b18825d9b668cda23d334c48867dfa66b2b36"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19628",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-57.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-57.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=212b18825d9b668cda23d334c48867dfa66b2b36",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=212b18825d9b668cda23d334c48867dfa66b2b36"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19628",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.435Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-19625

Vulnerability from cvelistv5

Published

2018-11-29 04:00

Modified

2024-08-05 11:44

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dc4d209f39132a4ae05675a11609176ae9705cfc	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://www.wireshark.org/security/wnpa-sec-2018-51.html	x_refsource_MISC
	http://www.securityfocus.com/bid/106051	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4359	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:44:19.403Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dc4d209f39132a4ae05675a11609176ae9705cfc"
          },
          {
            "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-51.html"
          },
          {
            "name": "106051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106051"
          },
          {
            "name": "DSA-4359",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4359"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:45",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dc4d209f39132a4ae05675a11609176ae9705cfc"
        },
        {
          "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-51.html"
        },
        {
          "name": "106051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106051"
        },
        {
          "name": "DSA-4359",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4359"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19625",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=dc4d209f39132a4ae05675a11609176ae9705cfc",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=dc4d209f39132a4ae05675a11609176ae9705cfc"
            },
            {
              "name": "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-51.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-51.html"
            },
            {
              "name": "106051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106051"
            },
            {
              "name": "DSA-4359",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4359"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19625",
    "datePublished": "2018-11-29T04:00:00",
    "dateReserved": "2018-11-28T00:00:00",
    "dateUpdated": "2024-08-05T11:44:19.403Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2020-9428

Vulnerability from cvelistv5

Published

2020-02-27 22:06

Modified

2024-08-04 10:26

Severity ?

Summary

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397	x_refsource_MISC
	https://www.wireshark.org/security/wnpa-sec-2020-05.html	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9fe2de783dbcbe74144678d60a4e3923367044b2	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202007-13	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:26:16.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2020-05.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9fe2de783dbcbe74144678d60a4e3923367044b2"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "FEDORA-2020-ef943221ca",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
          },
          {
            "name": "FEDORA-2020-87737529a4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
          },
          {
            "name": "FEDORA-2020-da7dcee2ec",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
          },
          {
            "name": "GLSA-202007-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-13"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:37",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2020-05.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9fe2de783dbcbe74144678d60a4e3923367044b2"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "FEDORA-2020-ef943221ca",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
        },
        {
          "name": "FEDORA-2020-87737529a4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
        },
        {
          "name": "FEDORA-2020-da7dcee2ec",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
        },
        {
          "name": "GLSA-202007-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-13"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-9428",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2020-05.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2020-05.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9fe2de783dbcbe74144678d60a4e3923367044b2",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9fe2de783dbcbe74144678d60a4e3923367044b2"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "FEDORA-2020-ef943221ca",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/"
            },
            {
              "name": "FEDORA-2020-87737529a4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/"
            },
            {
              "name": "FEDORA-2020-da7dcee2ec",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/"
            },
            {
              "name": "GLSA-202007-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-13"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-9428",
    "datePublished": "2020-02-27T22:06:50",
    "dateReserved": "2020-02-27T00:00:00",
    "dateUpdated": "2024-08-04T10:26:16.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-14343

Vulnerability from cvelistv5

Published

2018-07-19 02:00

Modified

2024-08-05 09:21

Severity ?

Summary

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9402f2f80c6bc7d25178a0875c5a1f5ee36361db	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041608	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html	mailing-list, x_refsource_MLIST
	https://www.wireshark.org/security/wnpa-sec-2018-37.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104847	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:21:41.605Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9402f2f80c6bc7d25178a0875c5a1f5ee36361db"
          },
          {
            "name": "1041608",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041608"
          },
          {
            "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2018-37.html"
          },
          {
            "name": "104847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104847"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-20T00:06:28",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9402f2f80c6bc7d25178a0875c5a1f5ee36361db"
        },
        {
          "name": "1041608",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041608"
        },
        {
          "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2018-37.html"
        },
        {
          "name": "104847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104847"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14343",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9402f2f80c6bc7d25178a0875c5a1f5ee36361db",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9402f2f80c6bc7d25178a0875c5a1f5ee36361db"
            },
            {
              "name": "1041608",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041608"
            },
            {
              "name": "[debian-lts-announce] 20180729 [SECURITY] [DLA 1451-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2018-37.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2018-37.html"
            },
            {
              "name": "104847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104847"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14343",
    "datePublished": "2018-07-19T02:00:00",
    "dateReserved": "2018-07-17T00:00:00",
    "dateUpdated": "2024-08-05T09:21:41.605Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-19553

Vulnerability from cvelistv5

Published

2019-12-05 00:58

Modified

2024-08-05 02:16

Severity ?

Summary

In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-22.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=34d2e0d5318d0a7e9889498c721639e5cbf4ce45	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:16:48.185Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-22.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=34d2e0d5318d0a7e9889498c721639e5cbf4ce45"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:41",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-22.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=34d2e0d5318d0a7e9889498c721639e5cbf4ce45"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19553",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-22.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-22.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=34d2e0d5318d0a7e9889498c721639e5cbf4ce45",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=34d2e0d5318d0a7e9889498c721639e5cbf4ce45"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19553",
    "datePublished": "2019-12-05T00:58:37",
    "dateReserved": "2019-12-04T00:00:00",
    "dateUpdated": "2024-08-05T02:16:48.185Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2019-16319

Vulnerability from cvelistv5

Published

2019-09-15 15:15

Modified

2024-08-05 01:10

Severity ?

Summary

In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2019-21.html	x_refsource_MISC
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020	x_refsource_MISC
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=02ddd49885c6a09e936a76aceb726ed06539704a	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:10:41.669Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2019-21.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=02ddd49885c6a09e936a76aceb726ed06539704a"
          },
          {
            "name": "openSUSE-SU-2020:0362",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
          },
          {
            "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-06T22:06:33",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2019-21.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=02ddd49885c6a09e936a76aceb726ed06539704a"
        },
        {
          "name": "openSUSE-SU-2020:0362",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
        },
        {
          "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-16319",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2019-21.html",
              "refsource": "MISC",
              "url": "https://www.wireshark.org/security/wnpa-sec-2019-21.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=02ddd49885c6a09e936a76aceb726ed06539704a",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=02ddd49885c6a09e936a76aceb726ed06539704a"
            },
            {
              "name": "openSUSE-SU-2020:0362",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html"
            },
            {
              "name": "[debian-lts-announce] 20210206 [SECURITY] [DLA 2547-1] wireshark security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-16319",
    "datePublished": "2019-09-15T15:15:14",
    "dateReserved": "2019-09-15T00:00:00",
    "dateUpdated": "2024-08-05T01:10:41.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_opensuse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature