csaf_suse - suse-su-2017:1174-1

Vulnerability from csaf_suse

Published

2017-05-04 10:03

Modified

2017-05-04 10:03

Summary

Security update for wireshark

Notes

Title of the patch

Security update for wireshark

Description of the patch

Wireshark was updated to version 2.0.12, which brings several new features, enhancements and bug fixes. These security issues were fixed: - CVE-2017-7700: In Wireshark the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size (bsc#1033936). - CVE-2017-7701: In Wireshark the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type (bsc#1033937). - CVE-2017-7702: In Wireshark the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation (bsc#1033938). - CVE-2017-7703: In Wireshark the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly (bsc#1033939). - CVE-2017-7704: In Wireshark the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value (bsc#1033940). - CVE-2017-7705: In Wireshark the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset (bsc#1033941). - CVE-2017-7745: In Wireshark the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check (bsc#1033942). - CVE-2017-7746: In Wireshark the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length (bsc#1033943). - CVE-2017-7747: In Wireshark the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree (bsc#1033944). - CVE-2017-7748: In Wireshark the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check (bsc#1033945). - CVE-2016-7179: Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark allowed remote attackers to cause a denial of service (application crash) via a crafted packet (bsc#998963). - CVE-2016-9376: In Wireshark the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large (bsc#1010735). - CVE-2016-9375: In Wireshark the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful (bsc#1010740). - CVE-2016-9374: In Wireshark the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable (bsc#1010752). - CVE-2016-9373: In Wireshark the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings (bsc#1010754). - CVE-2016-7175: epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark mishandled MAC address data, which allowed remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet (bsc#998761). - CVE-2016-7176: epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark called snprintf with one of its input buffers as the output buffer, which allowed remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet (bsc#998762). - CVE-2016-7177: epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark did not restrict the number of channels, which allowed remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet (bsc#998763). - CVE-2016-7180: epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark did not properly consider whether a string is constant, which allowed remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet (bsc#998800). - CVE-2016-7178: epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark did not ensure that memory is allocated for certain data structures, which allowed remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet (bsc#998964). - CVE-2017-6014: In Wireshark a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory (bsc#1025913). - CVE-2017-5596: In Wireshark the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow (bsc#1021739). - CVE-2017-5597: In Wireshark the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow (bsc#1021739).

Patchnames

sdksp4-wireshark-13089,slessp4-wireshark-13089

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for wireshark",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nWireshark was updated to version 2.0.12, which brings several new features, enhancements\nand bug fixes.\n\nThese security issues were fixed:\n\n- CVE-2017-7700: In Wireshark the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size (bsc#1033936).\n- CVE-2017-7701: In Wireshark the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type (bsc#1033937).\n- CVE-2017-7702: In Wireshark the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation (bsc#1033938).\n- CVE-2017-7703: In Wireshark the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly (bsc#1033939).\n- CVE-2017-7704: In Wireshark the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value (bsc#1033940).\n- CVE-2017-7705: In Wireshark the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset (bsc#1033941).\n- CVE-2017-7745: In Wireshark the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check (bsc#1033942).\n- CVE-2017-7746: In Wireshark the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length (bsc#1033943).\n- CVE-2017-7747: In Wireshark the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree (bsc#1033944).\n- CVE-2017-7748: In Wireshark the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check (bsc#1033945).\n- CVE-2016-7179: Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark allowed remote attackers to cause a denial of service (application crash) via a crafted packet (bsc#998963).\n- CVE-2016-9376: In Wireshark the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large (bsc#1010735).\n- CVE-2016-9375: In Wireshark the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful (bsc#1010740).\n- CVE-2016-9374: In Wireshark the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable (bsc#1010752).\n- CVE-2016-9373: In Wireshark the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings (bsc#1010754).\n- CVE-2016-7175: epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark mishandled MAC address data, which allowed remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet (bsc#998761).\n- CVE-2016-7176: epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark called snprintf with one of its input buffers as the output buffer, which allowed remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet (bsc#998762).\n- CVE-2016-7177: epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark did not restrict the number of channels, which allowed remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet (bsc#998763).\n- CVE-2016-7180: epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark did not properly consider whether a string is constant, which allowed remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet (bsc#998800).\n- CVE-2016-7178: epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark did not ensure that memory is allocated for certain data structures, which allowed remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet (bsc#998964).\n- CVE-2017-6014: In Wireshark a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory (bsc#1025913).\n- CVE-2017-5596: In Wireshark the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow (bsc#1021739).\n- CVE-2017-5597: In Wireshark the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow (bsc#1021739).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "sdksp4-wireshark-13089,slessp4-wireshark-13089",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1174-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2017:1174-1",
            url: "https://www.suse.com/support/update/announcement/2017/suse-su-20171174-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2017:1174-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1002981",
            url: "https://bugzilla.suse.com/1002981",
         },
         {
            category: "self",
            summary: "SUSE Bug 1010735",
            url: "https://bugzilla.suse.com/1010735",
         },
         {
            category: "self",
            summary: "SUSE Bug 1010740",
            url: "https://bugzilla.suse.com/1010740",
         },
         {
            category: "self",
            summary: "SUSE Bug 1010752",
            url: "https://bugzilla.suse.com/1010752",
         },
         {
            category: "self",
            summary: "SUSE Bug 1010754",
            url: "https://bugzilla.suse.com/1010754",
         },
         {
            category: "self",
            summary: "SUSE Bug 1010911",
            url: "https://bugzilla.suse.com/1010911",
         },
         {
            category: "self",
            summary: "SUSE Bug 1021739",
            url: "https://bugzilla.suse.com/1021739",
         },
         {
            category: "self",
            summary: "SUSE Bug 1025913",
            url: "https://bugzilla.suse.com/1025913",
         },
         {
            category: "self",
            summary: "SUSE Bug 1027998",
            url: "https://bugzilla.suse.com/1027998",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033936",
            url: "https://bugzilla.suse.com/1033936",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033937",
            url: "https://bugzilla.suse.com/1033937",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033938",
            url: "https://bugzilla.suse.com/1033938",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033939",
            url: "https://bugzilla.suse.com/1033939",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033940",
            url: "https://bugzilla.suse.com/1033940",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033941",
            url: "https://bugzilla.suse.com/1033941",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033942",
            url: "https://bugzilla.suse.com/1033942",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033943",
            url: "https://bugzilla.suse.com/1033943",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033944",
            url: "https://bugzilla.suse.com/1033944",
         },
         {
            category: "self",
            summary: "SUSE Bug 1033945",
            url: "https://bugzilla.suse.com/1033945",
         },
         {
            category: "self",
            summary: "SUSE Bug 998761",
            url: "https://bugzilla.suse.com/998761",
         },
         {
            category: "self",
            summary: "SUSE Bug 998762",
            url: "https://bugzilla.suse.com/998762",
         },
         {
            category: "self",
            summary: "SUSE Bug 998763",
            url: "https://bugzilla.suse.com/998763",
         },
         {
            category: "self",
            summary: "SUSE Bug 998800",
            url: "https://bugzilla.suse.com/998800",
         },
         {
            category: "self",
            summary: "SUSE Bug 998963",
            url: "https://bugzilla.suse.com/998963",
         },
         {
            category: "self",
            summary: "SUSE Bug 998964",
            url: "https://bugzilla.suse.com/998964",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-7175 page",
            url: "https://www.suse.com/security/cve/CVE-2016-7175/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-7176 page",
            url: "https://www.suse.com/security/cve/CVE-2016-7176/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-7177 page",
            url: "https://www.suse.com/security/cve/CVE-2016-7177/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-7178 page",
            url: "https://www.suse.com/security/cve/CVE-2016-7178/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-7179 page",
            url: "https://www.suse.com/security/cve/CVE-2016-7179/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-7180 page",
            url: "https://www.suse.com/security/cve/CVE-2016-7180/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-9373 page",
            url: "https://www.suse.com/security/cve/CVE-2016-9373/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-9374 page",
            url: "https://www.suse.com/security/cve/CVE-2016-9374/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-9375 page",
            url: "https://www.suse.com/security/cve/CVE-2016-9375/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-9376 page",
            url: "https://www.suse.com/security/cve/CVE-2016-9376/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-5596 page",
            url: "https://www.suse.com/security/cve/CVE-2017-5596/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-5597 page",
            url: "https://www.suse.com/security/cve/CVE-2017-5597/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-6014 page",
            url: "https://www.suse.com/security/cve/CVE-2017-6014/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7700 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7700/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7701 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7701/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7702 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7702/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7703 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7703/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7704 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7704/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7705 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7705/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7745 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7745/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7746 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7746/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7747 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7747/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7748 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7748/",
         },
      ],
      title: "Security update for wireshark",
      tracking: {
         current_release_date: "2017-05-04T10:03:13Z",
         generator: {
            date: "2017-05-04T10:03:13Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2017:1174-1",
         initial_release_date: "2017-05-04T10:03:13Z",
         revision_history: [
            {
               date: "2017-05-04T10:03:13Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "wireshark-2.0.12-36.1.i586",
                        product: {
                           name: "wireshark-2.0.12-36.1.i586",
                           product_id: "wireshark-2.0.12-36.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-devel-2.0.12-36.1.i586",
                        product: {
                           name: "wireshark-devel-2.0.12-36.1.i586",
                           product_id: "wireshark-devel-2.0.12-36.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-gtk-2.0.12-36.1.i586",
                        product: {
                           name: "wireshark-gtk-2.0.12-36.1.i586",
                           product_id: "wireshark-gtk-2.0.12-36.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "wireshark-devel-2.0.12-36.1.ia64",
                        product: {
                           name: "wireshark-devel-2.0.12-36.1.ia64",
                           product_id: "wireshark-devel-2.0.12-36.1.ia64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-2.0.12-36.1.ia64",
                        product: {
                           name: "wireshark-2.0.12-36.1.ia64",
                           product_id: "wireshark-2.0.12-36.1.ia64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-gtk-2.0.12-36.1.ia64",
                        product: {
                           name: "wireshark-gtk-2.0.12-36.1.ia64",
                           product_id: "wireshark-gtk-2.0.12-36.1.ia64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ia64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "wireshark-devel-2.0.12-36.1.ppc64",
                        product: {
                           name: "wireshark-devel-2.0.12-36.1.ppc64",
                           product_id: "wireshark-devel-2.0.12-36.1.ppc64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-2.0.12-36.1.ppc64",
                        product: {
                           name: "wireshark-2.0.12-36.1.ppc64",
                           product_id: "wireshark-2.0.12-36.1.ppc64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-gtk-2.0.12-36.1.ppc64",
                        product: {
                           name: "wireshark-gtk-2.0.12-36.1.ppc64",
                           product_id: "wireshark-gtk-2.0.12-36.1.ppc64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "wireshark-devel-2.0.12-36.1.s390x",
                        product: {
                           name: "wireshark-devel-2.0.12-36.1.s390x",
                           product_id: "wireshark-devel-2.0.12-36.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-2.0.12-36.1.s390x",
                        product: {
                           name: "wireshark-2.0.12-36.1.s390x",
                           product_id: "wireshark-2.0.12-36.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-gtk-2.0.12-36.1.s390x",
                        product: {
                           name: "wireshark-gtk-2.0.12-36.1.s390x",
                           product_id: "wireshark-gtk-2.0.12-36.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "wireshark-2.0.12-36.1.x86_64",
                        product: {
                           name: "wireshark-2.0.12-36.1.x86_64",
                           product_id: "wireshark-2.0.12-36.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-devel-2.0.12-36.1.x86_64",
                        product: {
                           name: "wireshark-devel-2.0.12-36.1.x86_64",
                           product_id: "wireshark-devel-2.0.12-36.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-gtk-2.0.12-36.1.x86_64",
                        product: {
                           name: "wireshark-gtk-2.0.12-36.1.x86_64",
                           product_id: "wireshark-gtk-2.0.12-36.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 11 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 11 SP4",
                           product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/a:suse:sle-sdk:11:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 11 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server 11 SP4",
                           product_id: "SUSE Linux Enterprise Server 11 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse_sles:11:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:11:sp4",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
            },
            product_reference: "wireshark-2.0.12-36.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
            },
            product_reference: "wireshark-2.0.12-36.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-devel-2.0.12-36.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
            },
            product_reference: "wireshark-devel-2.0.12-36.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-devel-2.0.12-36.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
            },
            product_reference: "wireshark-devel-2.0.12-36.1.ia64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-devel-2.0.12-36.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
            },
            product_reference: "wireshark-devel-2.0.12-36.1.ppc64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-devel-2.0.12-36.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
            },
            product_reference: "wireshark-devel-2.0.12-36.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-devel-2.0.12-36.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
            },
            product_reference: "wireshark-devel-2.0.12-36.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
            },
            product_reference: "wireshark-2.0.12-36.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
            },
            product_reference: "wireshark-2.0.12-36.1.ia64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
            },
            product_reference: "wireshark-2.0.12-36.1.ppc64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
            },
            product_reference: "wireshark-2.0.12-36.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
            },
            product_reference: "wireshark-2.0.12-36.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.ia64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.ppc64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
            },
            product_reference: "wireshark-2.0.12-36.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
            },
            product_reference: "wireshark-2.0.12-36.1.ia64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
            },
            product_reference: "wireshark-2.0.12-36.1.ppc64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
            },
            product_reference: "wireshark-2.0.12-36.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-2.0.12-36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
            },
            product_reference: "wireshark-2.0.12-36.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.ia64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.ppc64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-gtk-2.0.12-36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            },
            product_reference: "wireshark-gtk-2.0.12-36.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-7175",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-7175",
            },
         ],
         notes: [
            {
               category: "general",
               text: "epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-7175",
               url: "https://www.suse.com/security/cve/CVE-2016-7175",
            },
            {
               category: "external",
               summary: "SUSE Bug 998099 for CVE-2016-7175",
               url: "https://bugzilla.suse.com/998099",
            },
            {
               category: "external",
               summary: "SUSE Bug 998761 for CVE-2016-7175",
               url: "https://bugzilla.suse.com/998761",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-7175",
      },
      {
         cve: "CVE-2016-7176",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-7176",
            },
         ],
         notes: [
            {
               category: "general",
               text: "epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-7176",
               url: "https://www.suse.com/security/cve/CVE-2016-7176",
            },
            {
               category: "external",
               summary: "SUSE Bug 998099 for CVE-2016-7176",
               url: "https://bugzilla.suse.com/998099",
            },
            {
               category: "external",
               summary: "SUSE Bug 998762 for CVE-2016-7176",
               url: "https://bugzilla.suse.com/998762",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-7176",
      },
      {
         cve: "CVE-2016-7177",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-7177",
            },
         ],
         notes: [
            {
               category: "general",
               text: "epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-7177",
               url: "https://www.suse.com/security/cve/CVE-2016-7177",
            },
            {
               category: "external",
               summary: "SUSE Bug 998099 for CVE-2016-7177",
               url: "https://bugzilla.suse.com/998099",
            },
            {
               category: "external",
               summary: "SUSE Bug 998763 for CVE-2016-7177",
               url: "https://bugzilla.suse.com/998763",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-7177",
      },
      {
         cve: "CVE-2016-7178",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-7178",
            },
         ],
         notes: [
            {
               category: "general",
               text: "epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-7178",
               url: "https://www.suse.com/security/cve/CVE-2016-7178",
            },
            {
               category: "external",
               summary: "SUSE Bug 998099 for CVE-2016-7178",
               url: "https://bugzilla.suse.com/998099",
            },
            {
               category: "external",
               summary: "SUSE Bug 998964 for CVE-2016-7178",
               url: "https://bugzilla.suse.com/998964",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-7178",
      },
      {
         cve: "CVE-2016-7179",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-7179",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-7179",
               url: "https://www.suse.com/security/cve/CVE-2016-7179",
            },
            {
               category: "external",
               summary: "SUSE Bug 998099 for CVE-2016-7179",
               url: "https://bugzilla.suse.com/998099",
            },
            {
               category: "external",
               summary: "SUSE Bug 998963 for CVE-2016-7179",
               url: "https://bugzilla.suse.com/998963",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-7179",
      },
      {
         cve: "CVE-2016-7180",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-7180",
            },
         ],
         notes: [
            {
               category: "general",
               text: "epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-7180",
               url: "https://www.suse.com/security/cve/CVE-2016-7180",
            },
            {
               category: "external",
               summary: "SUSE Bug 998099 for CVE-2016-7180",
               url: "https://bugzilla.suse.com/998099",
            },
            {
               category: "external",
               summary: "SUSE Bug 998800 for CVE-2016-7180",
               url: "https://bugzilla.suse.com/998800",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-7180",
      },
      {
         cve: "CVE-2016-9373",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-9373",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-9373",
               url: "https://www.suse.com/security/cve/CVE-2016-9373",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010754 for CVE-2016-9373",
               url: "https://bugzilla.suse.com/1010754",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010911 for CVE-2016-9373",
               url: "https://bugzilla.suse.com/1010911",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-9373",
      },
      {
         cve: "CVE-2016-9374",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-9374",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-9374",
               url: "https://www.suse.com/security/cve/CVE-2016-9374",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010752 for CVE-2016-9374",
               url: "https://bugzilla.suse.com/1010752",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010911 for CVE-2016-9374",
               url: "https://bugzilla.suse.com/1010911",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-9374",
      },
      {
         cve: "CVE-2016-9375",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-9375",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-9375",
               url: "https://www.suse.com/security/cve/CVE-2016-9375",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010740 for CVE-2016-9375",
               url: "https://bugzilla.suse.com/1010740",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010911 for CVE-2016-9375",
               url: "https://bugzilla.suse.com/1010911",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-9375",
      },
      {
         cve: "CVE-2016-9376",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-9376",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-9376",
               url: "https://www.suse.com/security/cve/CVE-2016-9376",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010735 for CVE-2016-9376",
               url: "https://bugzilla.suse.com/1010735",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010911 for CVE-2016-9376",
               url: "https://bugzilla.suse.com/1010911",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-9376",
      },
      {
         cve: "CVE-2017-5596",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-5596",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-5596",
               url: "https://www.suse.com/security/cve/CVE-2017-5596",
            },
            {
               category: "external",
               summary: "SUSE Bug 1021739 for CVE-2017-5596",
               url: "https://bugzilla.suse.com/1021739",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "low",
            },
         ],
         title: "CVE-2017-5596",
      },
      {
         cve: "CVE-2017-5597",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-5597",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-5597",
               url: "https://www.suse.com/security/cve/CVE-2017-5597",
            },
            {
               category: "external",
               summary: "SUSE Bug 1021739 for CVE-2017-5597",
               url: "https://bugzilla.suse.com/1021739",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "low",
            },
         ],
         title: "CVE-2017-5597",
      },
      {
         cve: "CVE-2017-6014",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-6014",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-6014",
               url: "https://www.suse.com/security/cve/CVE-2017-6014",
            },
            {
               category: "external",
               summary: "SUSE Bug 1025913 for CVE-2017-6014",
               url: "https://bugzilla.suse.com/1025913",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-6014",
      },
      {
         cve: "CVE-2017-7700",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7700",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7700",
               url: "https://www.suse.com/security/cve/CVE-2017-7700",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033936 for CVE-2017-7700",
               url: "https://bugzilla.suse.com/1033936",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7700",
      },
      {
         cve: "CVE-2017-7701",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7701",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7701",
               url: "https://www.suse.com/security/cve/CVE-2017-7701",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033937 for CVE-2017-7701",
               url: "https://bugzilla.suse.com/1033937",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7701",
      },
      {
         cve: "CVE-2017-7702",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7702",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7702",
               url: "https://www.suse.com/security/cve/CVE-2017-7702",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033938 for CVE-2017-7702",
               url: "https://bugzilla.suse.com/1033938",
            },
            {
               category: "external",
               summary: "SUSE Bug 1049255 for CVE-2017-7702",
               url: "https://bugzilla.suse.com/1049255",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7702",
      },
      {
         cve: "CVE-2017-7703",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7703",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7703",
               url: "https://www.suse.com/security/cve/CVE-2017-7703",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033939 for CVE-2017-7703",
               url: "https://bugzilla.suse.com/1033939",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7703",
      },
      {
         cve: "CVE-2017-7704",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7704",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7704",
               url: "https://www.suse.com/security/cve/CVE-2017-7704",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033940 for CVE-2017-7704",
               url: "https://bugzilla.suse.com/1033940",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7704",
      },
      {
         cve: "CVE-2017-7705",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7705",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7705",
               url: "https://www.suse.com/security/cve/CVE-2017-7705",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033941 for CVE-2017-7705",
               url: "https://bugzilla.suse.com/1033941",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7705",
      },
      {
         cve: "CVE-2017-7745",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7745",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7745",
               url: "https://www.suse.com/security/cve/CVE-2017-7745",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033942 for CVE-2017-7745",
               url: "https://bugzilla.suse.com/1033942",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7745",
      },
      {
         cve: "CVE-2017-7746",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7746",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7746",
               url: "https://www.suse.com/security/cve/CVE-2017-7746",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033943 for CVE-2017-7746",
               url: "https://bugzilla.suse.com/1033943",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7746",
      },
      {
         cve: "CVE-2017-7747",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7747",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7747",
               url: "https://www.suse.com/security/cve/CVE-2017-7747",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033944 for CVE-2017-7747",
               url: "https://bugzilla.suse.com/1033944",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7747",
      },
      {
         cve: "CVE-2017-7748",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7748",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
               "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7748",
               url: "https://www.suse.com/security/cve/CVE-2017-7748",
            },
            {
               category: "external",
               summary: "SUSE Bug 1033945 for CVE-2017-7748",
               url: "https://bugzilla.suse.com/1033945",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ia64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.ppc64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.0.12-36.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.i586",
                  "SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.0.12-36.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-05-04T10:03:13Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7748",
      },
   ],
}

cve-2017-7746

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=58e69cc769dea24b721abd8a29f9eedc11024b7e	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/97635	vdb-entry, x_refsource_BID
	https://www.wireshark.org/security/wnpa-sec-2017-19.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:28.347Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=58e69cc769dea24b721abd8a29f9eedc11024b7e",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576",
               },
               {
                  name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
               },
               {
                  name: "97635",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97635",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-19.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-01-16T10:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=58e69cc769dea24b721abd8a29f9eedc11024b7e",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576",
            },
            {
               name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
            },
            {
               name: "97635",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97635",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-19.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7746",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=58e69cc769dea24b721abd8a29f9eedc11024b7e",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=58e69cc769dea24b721abd8a29f9eedc11024b7e",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576",
                  },
                  {
                     name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
                  },
                  {
                     name: "97635",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97635",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-19.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-19.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7746",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-12T00:00:00",
      dateUpdated: "2024-08-05T16:12:28.347Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-7178

Vulnerability from cvelistv5

Published

2016-09-09 10:00

Modified

2024-08-06 01:50

Severity ?

Summary

epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2016-53.html	x_refsource_CONFIRM
	https://code.wireshark.org/review/17094	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036760	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2016/dsa-3671	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=315bba7c645b75af24215c6303d187b188610bba	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T01:50:47.628Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-53.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/17094",
               },
               {
                  name: "1036760",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1036760",
               },
               {
                  name: "DSA-3671",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3671",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=315bba7c645b75af24215c6303d187b188610bba",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-09-07T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2016-09-27T14:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-53.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/17094",
            },
            {
               name: "1036760",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1036760",
            },
            {
               name: "DSA-3671",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3671",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=315bba7c645b75af24215c6303d187b188610bba",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-7178",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-53.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-53.html",
                  },
                  {
                     name: "https://code.wireshark.org/review/17094",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/17094",
                  },
                  {
                     name: "1036760",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1036760",
                  },
                  {
                     name: "DSA-3671",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3671",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=315bba7c645b75af24215c6303d187b188610bba",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=315bba7c645b75af24215c6303d187b188610bba",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-7178",
      datePublished: "2016-09-09T10:00:00",
      dateReserved: "2016-09-08T00:00:00",
      dateUpdated: "2024-08-06T01:50:47.628Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7745

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2017-20.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97627	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:28.245Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-20.html",
               },
               {
                  name: "97627",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97627",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-04-14T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-20.html",
            },
            {
               name: "97627",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97627",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7745",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-20.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-20.html",
                  },
                  {
                     name: "97627",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97627",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7745",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-12T00:00:00",
      dateUpdated: "2024-08-05T16:12:28.245Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-9376

Vulnerability from cvelistv5

Published

2016-11-17 05:48

Modified

2024-08-06 02:50

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1037313	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13071	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f2a7af8d3928e18ef15778e63b9b6c78f8bd1bef	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2016-60.html	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3719	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/94369	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:50:37.378Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "1037313",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037313",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13071",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f2a7af8d3928e18ef15778e63b9b6c78f8bd1bef",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-60.html",
               },
               {
                  name: "DSA-3719",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3719",
               },
               {
                  name: "94369",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94369",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-11-16T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-27T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "1037313",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1037313",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13071",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f2a7af8d3928e18ef15778e63b9b6c78f8bd1bef",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-60.html",
            },
            {
               name: "DSA-3719",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3719",
            },
            {
               name: "94369",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/94369",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-9376",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "1037313",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1037313",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13071",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13071",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f2a7af8d3928e18ef15778e63b9b6c78f8bd1bef",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f2a7af8d3928e18ef15778e63b9b6c78f8bd1bef",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-60.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-60.html",
                  },
                  {
                     name: "DSA-3719",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3719",
                  },
                  {
                     name: "94369",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/94369",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-9376",
      datePublished: "2016-11-17T05:48:00",
      dateReserved: "2016-11-16T00:00:00",
      dateUpdated: "2024-08-06T02:50:37.378Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7702

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/97633	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2f322f66cbcca2fefdaa630494f9d6c97eb659b7	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038262	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201706-12	vendor-advisory, x_refsource_GENTOO
	https://www.wireshark.org/security/wnpa-sec-2017-13.html	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:28.000Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "97633",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97633",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2f322f66cbcca2fefdaa630494f9d6c97eb659b7",
               },
               {
                  name: "1038262",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1038262",
               },
               {
                  name: "GLSA-201706-12",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201706-12",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-13.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "97633",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97633",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2f322f66cbcca2fefdaa630494f9d6c97eb659b7",
            },
            {
               name: "1038262",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1038262",
            },
            {
               name: "GLSA-201706-12",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201706-12",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-13.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7702",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "97633",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97633",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2f322f66cbcca2fefdaa630494f9d6c97eb659b7",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2f322f66cbcca2fefdaa630494f9d6c97eb659b7",
                  },
                  {
                     name: "1038262",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1038262",
                  },
                  {
                     name: "GLSA-201706-12",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201706-12",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-13.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-13.html",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7702",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-11T00:00:00",
      dateUpdated: "2024-08-05T16:12:28.000Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7700

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2017-14.html	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8fc0af859de4993951a915ad735be350221f3f53	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/97631	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038262	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201706-12	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:28.038Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-14.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8fc0af859de4993951a915ad735be350221f3f53",
               },
               {
                  name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
               },
               {
                  name: "97631",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97631",
               },
               {
                  name: "1038262",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1038262",
               },
               {
                  name: "GLSA-201706-12",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201706-12",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-01-16T10:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-14.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8fc0af859de4993951a915ad735be350221f3f53",
            },
            {
               name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
            },
            {
               name: "97631",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97631",
            },
            {
               name: "1038262",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1038262",
            },
            {
               name: "GLSA-201706-12",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201706-12",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7700",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-14.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-14.html",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=8fc0af859de4993951a915ad735be350221f3f53",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=8fc0af859de4993951a915ad735be350221f3f53",
                  },
                  {
                     name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
                  },
                  {
                     name: "97631",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97631",
                  },
                  {
                     name: "1038262",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1038262",
                  },
                  {
                     name: "GLSA-201706-12",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201706-12",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7700",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-11T00:00:00",
      dateUpdated: "2024-08-05T16:12:28.038Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-9373

Vulnerability from cvelistv5

Published

2016-11-17 05:48

Modified

2024-08-06 02:50

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1037313	vdb-entry, x_refsource_SECTRACK
	https://www.wireshark.org/security/wnpa-sec-2016-61.html	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cc8e37f0f53c4401bb1644a34eddea345940a8df	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3719	vendor-advisory, x_refsource_DEBIAN
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13072	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94369	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:50:37.504Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "1037313",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037313",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-61.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cc8e37f0f53c4401bb1644a34eddea345940a8df",
               },
               {
                  name: "DSA-3719",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3719",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13072",
               },
               {
                  name: "94369",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94369",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-11-16T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-27T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "1037313",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1037313",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-61.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cc8e37f0f53c4401bb1644a34eddea345940a8df",
            },
            {
               name: "DSA-3719",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3719",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13072",
            },
            {
               name: "94369",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/94369",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-9373",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "1037313",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1037313",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-61.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-61.html",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cc8e37f0f53c4401bb1644a34eddea345940a8df",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cc8e37f0f53c4401bb1644a34eddea345940a8df",
                  },
                  {
                     name: "DSA-3719",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3719",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13072",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13072",
                  },
                  {
                     name: "94369",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/94369",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-9373",
      datePublished: "2016-11-17T05:48:00",
      dateReserved: "2016-11-16T00:00:00",
      dateUpdated: "2024-08-06T02:50:37.504Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-7180

Vulnerability from cvelistv5

Published

2016-09-09 10:00

Modified

2024-08-06 01:50

Severity ?

Summary

epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2016-55.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036760	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2016/dsa-3671	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/17289	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5213496250aceff086404c568e3718ebc0060934	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T01:50:47.580Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-55.html",
               },
               {
                  name: "1036760",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1036760",
               },
               {
                  name: "DSA-3671",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3671",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/17289",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5213496250aceff086404c568e3718ebc0060934",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-09-07T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2016-09-27T14:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-55.html",
            },
            {
               name: "1036760",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1036760",
            },
            {
               name: "DSA-3671",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3671",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/17289",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5213496250aceff086404c568e3718ebc0060934",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-7180",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-55.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-55.html",
                  },
                  {
                     name: "1036760",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1036760",
                  },
                  {
                     name: "DSA-3671",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3671",
                  },
                  {
                     name: "https://code.wireshark.org/review/17289",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/17289",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=5213496250aceff086404c568e3718ebc0060934",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=5213496250aceff086404c568e3718ebc0060934",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-7180",
      datePublished: "2016-09-09T10:00:00",
      dateReserved: "2016-09-08T00:00:00",
      dateUpdated: "2024-08-06T01:50:47.580Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-6014

Vulnerability from cvelistv5

Published

2017-02-17 07:45

Modified

2024-08-05 15:18

Severity ?

Summary

In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/96284	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201706-12	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3811	vendor-advisory, x_refsource_DEBIAN
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:18:49.363Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "96284",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96284",
               },
               {
                  name: "GLSA-201706-12",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201706-12",
               },
               {
                  name: "DSA-3811",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3811",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-03T18:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "96284",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96284",
            },
            {
               name: "GLSA-201706-12",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201706-12",
            },
            {
               name: "DSA-3811",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3811",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-6014",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "96284",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96284",
                  },
                  {
                     name: "GLSA-201706-12",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201706-12",
                  },
                  {
                     name: "DSA-3811",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3811",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-6014",
      datePublished: "2017-02-17T07:45:00",
      dateReserved: "2017-02-16T00:00:00",
      dateUpdated: "2024-08-05T15:18:49.363Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7703

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=671e32820ab29d41d712cc8a472eab9b672684d9	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1038262	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201706-12	vendor-advisory, x_refsource_GENTOO
	https://www.wireshark.org/security/wnpa-sec-2017-12.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97636	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13466	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:27.827Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=671e32820ab29d41d712cc8a472eab9b672684d9",
               },
               {
                  name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
               },
               {
                  name: "1038262",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1038262",
               },
               {
                  name: "GLSA-201706-12",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201706-12",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-12.html",
               },
               {
                  name: "97636",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97636",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13466",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-01-16T10:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=671e32820ab29d41d712cc8a472eab9b672684d9",
            },
            {
               name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
            },
            {
               name: "1038262",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1038262",
            },
            {
               name: "GLSA-201706-12",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201706-12",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-12.html",
            },
            {
               name: "97636",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97636",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13466",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7703",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=671e32820ab29d41d712cc8a472eab9b672684d9",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=671e32820ab29d41d712cc8a472eab9b672684d9",
                  },
                  {
                     name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
                  },
                  {
                     name: "1038262",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1038262",
                  },
                  {
                     name: "GLSA-201706-12",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201706-12",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-12.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-12.html",
                  },
                  {
                     name: "97636",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97636",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13466",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13466",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7703",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-11T00:00:00",
      dateUpdated: "2024-08-05T16:12:27.827Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7747

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/97638	vdb-entry, x_refsource_BID
	https://www.wireshark.org/security/wnpa-sec-2017-18.html	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html	mailing-list, x_refsource_MLIST
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5cfd52d6629cf8a7ab67c6bacd3431a964f43584	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:28.421Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "97638",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97638",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-18.html",
               },
               {
                  name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5cfd52d6629cf8a7ab67c6bacd3431a964f43584",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-01-16T10:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "97638",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97638",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-18.html",
            },
            {
               name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5cfd52d6629cf8a7ab67c6bacd3431a964f43584",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7747",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "97638",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97638",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-18.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-18.html",
                  },
                  {
                     name: "[debian-lts-announce] 20190115 [SECURITY] [DLA 1634-1] wireshark security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=5cfd52d6629cf8a7ab67c6bacd3431a964f43584",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=5cfd52d6629cf8a7ab67c6bacd3431a964f43584",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7747",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-12T00:00:00",
      dateUpdated: "2024-08-05T16:12:28.421Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7704

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2017-17.html	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6032b0fe5fc1176ab77e03e20765f95fbd21b19e	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038262	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/97634	vdb-entry, x_refsource_BID
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=da53a90b6895e47e03c5de05edf84bd99d535fd8	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201706-12	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:27.951Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-17.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6032b0fe5fc1176ab77e03e20765f95fbd21b19e",
               },
               {
                  name: "1038262",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1038262",
               },
               {
                  name: "97634",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97634",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=da53a90b6895e47e03c5de05edf84bd99d535fd8",
               },
               {
                  name: "GLSA-201706-12",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201706-12",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-17.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6032b0fe5fc1176ab77e03e20765f95fbd21b19e",
            },
            {
               name: "1038262",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1038262",
            },
            {
               name: "97634",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97634",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=da53a90b6895e47e03c5de05edf84bd99d535fd8",
            },
            {
               name: "GLSA-201706-12",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201706-12",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7704",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-17.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-17.html",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6032b0fe5fc1176ab77e03e20765f95fbd21b19e",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6032b0fe5fc1176ab77e03e20765f95fbd21b19e",
                  },
                  {
                     name: "1038262",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1038262",
                  },
                  {
                     name: "97634",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97634",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=da53a90b6895e47e03c5de05edf84bd99d535fd8",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=da53a90b6895e47e03c5de05edf84bd99d535fd8",
                  },
                  {
                     name: "GLSA-201706-12",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201706-12",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7704",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-11T00:00:00",
      dateUpdated: "2024-08-05T16:12:27.951Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7705

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=08d392bbecc8fb666bf979e70a34536007b83ea2	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97630	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038262	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201706-12	vendor-advisory, x_refsource_GENTOO
	https://www.wireshark.org/security/wnpa-sec-2017-15.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:27.876Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=08d392bbecc8fb666bf979e70a34536007b83ea2",
               },
               {
                  name: "97630",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97630",
               },
               {
                  name: "1038262",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1038262",
               },
               {
                  name: "GLSA-201706-12",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201706-12",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-15.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=08d392bbecc8fb666bf979e70a34536007b83ea2",
            },
            {
               name: "97630",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97630",
            },
            {
               name: "1038262",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1038262",
            },
            {
               name: "GLSA-201706-12",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201706-12",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-15.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7705",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=08d392bbecc8fb666bf979e70a34536007b83ea2",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=08d392bbecc8fb666bf979e70a34536007b83ea2",
                  },
                  {
                     name: "97630",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97630",
                  },
                  {
                     name: "1038262",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1038262",
                  },
                  {
                     name: "GLSA-201706-12",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201706-12",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-15.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-15.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7705",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-11T00:00:00",
      dateUpdated: "2024-08-05T16:12:27.876Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-9375

Vulnerability from cvelistv5

Published

2016-11-17 05:48

Modified

2024-08-06 02:50

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=be6a10afc59f8182b9884d02f9857d547539fe8a	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037313	vdb-entry, x_refsource_SECTRACK
	https://www.wireshark.org/security/wnpa-sec-2016-62.html	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3719	vendor-advisory, x_refsource_DEBIAN
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13097	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94369	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:50:37.795Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=be6a10afc59f8182b9884d02f9857d547539fe8a",
               },
               {
                  name: "1037313",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037313",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-62.html",
               },
               {
                  name: "DSA-3719",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3719",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13097",
               },
               {
                  name: "94369",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94369",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-11-16T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-27T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=be6a10afc59f8182b9884d02f9857d547539fe8a",
            },
            {
               name: "1037313",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1037313",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-62.html",
            },
            {
               name: "DSA-3719",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3719",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13097",
            },
            {
               name: "94369",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/94369",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-9375",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=be6a10afc59f8182b9884d02f9857d547539fe8a",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=be6a10afc59f8182b9884d02f9857d547539fe8a",
                  },
                  {
                     name: "1037313",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1037313",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-62.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-62.html",
                  },
                  {
                     name: "DSA-3719",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3719",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13097",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13097",
                  },
                  {
                     name: "94369",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/94369",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-9375",
      datePublished: "2016-11-17T05:48:00",
      dateReserved: "2016-11-16T00:00:00",
      dateUpdated: "2024-08-06T02:50:37.795Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-5597

Vulnerability from cvelistv5

Published

2017-01-25 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2017-02.html	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=57894f741f7cc98b46c9fdce7eee8256d2a4ae3f	x_refsource_CONFIRM
	https://code.wireshark.org/review/#/c/19747/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/95798	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3811	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1037694	vdb-entry, x_refsource_SECTRACK
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13345	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:04:15.363Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-02.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=57894f741f7cc98b46c9fdce7eee8256d2a4ae3f",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/#/c/19747/",
               },
               {
                  name: "95798",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/95798",
               },
               {
                  name: "DSA-3811",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3811",
               },
               {
                  name: "1037694",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037694",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13345",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-01-25T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-03T18:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-02.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=57894f741f7cc98b46c9fdce7eee8256d2a4ae3f",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/#/c/19747/",
            },
            {
               name: "95798",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/95798",
            },
            {
               name: "DSA-3811",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3811",
            },
            {
               name: "1037694",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1037694",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13345",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-5597",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-02.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-02.html",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=57894f741f7cc98b46c9fdce7eee8256d2a4ae3f",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=57894f741f7cc98b46c9fdce7eee8256d2a4ae3f",
                  },
                  {
                     name: "https://code.wireshark.org/review/#/c/19747/",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/#/c/19747/",
                  },
                  {
                     name: "95798",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/95798",
                  },
                  {
                     name: "DSA-3811",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3811",
                  },
                  {
                     name: "1037694",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1037694",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13345",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13345",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-5597",
      datePublished: "2017-01-25T21:00:00",
      dateReserved: "2017-01-25T00:00:00",
      dateUpdated: "2024-08-05T15:04:15.363Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-7176

Vulnerability from cvelistv5

Published

2016-09-09 10:00

Modified

2024-08-06 01:50

Severity ?

Summary

epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.

References

▼	URL	Tags
	https://code.wireshark.org/review/16852	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12700	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2016-51.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036760	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2016/dsa-3671	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6d8261994bb928b7e80e3a2478a3d939ea1ef373	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T01:50:47.463Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/16852",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12700",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-51.html",
               },
               {
                  name: "1036760",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1036760",
               },
               {
                  name: "DSA-3671",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3671",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6d8261994bb928b7e80e3a2478a3d939ea1ef373",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-09-07T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2016-09-27T14:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/16852",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12700",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-51.html",
            },
            {
               name: "1036760",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1036760",
            },
            {
               name: "DSA-3671",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3671",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6d8261994bb928b7e80e3a2478a3d939ea1ef373",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-7176",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://code.wireshark.org/review/16852",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/16852",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12700",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12700",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-51.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-51.html",
                  },
                  {
                     name: "1036760",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1036760",
                  },
                  {
                     name: "DSA-3671",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3671",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6d8261994bb928b7e80e3a2478a3d939ea1ef373",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6d8261994bb928b7e80e3a2478a3d939ea1ef373",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-7176",
      datePublished: "2016-09-09T10:00:00",
      dateReserved: "2016-09-08T00:00:00",
      dateUpdated: "2024-08-06T01:50:47.463Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7748

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f55cbcde2c8f74b652add4450b0592082eb6acff	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2017-21.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97628	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:28.441Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f55cbcde2c8f74b652add4450b0592082eb6acff",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-21.html",
               },
               {
                  name: "97628",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97628",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-04-14T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f55cbcde2c8f74b652add4450b0592082eb6acff",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-21.html",
            },
            {
               name: "97628",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97628",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7748",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f55cbcde2c8f74b652add4450b0592082eb6acff",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f55cbcde2c8f74b652add4450b0592082eb6acff",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-21.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-21.html",
                  },
                  {
                     name: "97628",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97628",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7748",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-12T00:00:00",
      dateUpdated: "2024-08-05T16:12:28.441Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-5596

Vulnerability from cvelistv5

Published

2017-01-25 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.

References

▼	URL	Tags
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=781f03580c81339513bb1238b202b72469a1240b	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/95795	vdb-entry, x_refsource_BID
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13344	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2017-01.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3811	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/#/c/19746/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037694	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:04:15.346Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=781f03580c81339513bb1238b202b72469a1240b",
               },
               {
                  name: "95795",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/95795",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13344",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-01.html",
               },
               {
                  name: "DSA-3811",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3811",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/#/c/19746/",
               },
               {
                  name: "1037694",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037694",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-01-25T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-03T18:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=781f03580c81339513bb1238b202b72469a1240b",
            },
            {
               name: "95795",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/95795",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13344",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-01.html",
            },
            {
               name: "DSA-3811",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3811",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/#/c/19746/",
            },
            {
               name: "1037694",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1037694",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-5596",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=781f03580c81339513bb1238b202b72469a1240b",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=781f03580c81339513bb1238b202b72469a1240b",
                  },
                  {
                     name: "95795",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/95795",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13344",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13344",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-01.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-01.html",
                  },
                  {
                     name: "DSA-3811",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3811",
                  },
                  {
                     name: "https://code.wireshark.org/review/#/c/19746/",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/#/c/19746/",
                  },
                  {
                     name: "1037694",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1037694",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-5596",
      datePublished: "2017-01-25T21:00:00",
      dateReserved: "2017-01-25T00:00:00",
      dateUpdated: "2024-08-05T15:04:15.346Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-7175

Vulnerability from cvelistv5

Published

2016-09-09 10:00

Modified

2024-08-06 01:50

Severity ?

Summary

epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2016-50.html	x_refsource_CONFIRM
	https://code.wireshark.org/review/16965	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036760	vdb-entry, x_refsource_SECTRACK
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1396f6ad555178f6b81cc1a65f9cb37b2d99aebf	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11850	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T01:50:47.527Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-50.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/16965",
               },
               {
                  name: "1036760",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1036760",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1396f6ad555178f6b81cc1a65f9cb37b2d99aebf",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11850",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-09-07T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2016-09-23T14:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-50.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/16965",
            },
            {
               name: "1036760",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1036760",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1396f6ad555178f6b81cc1a65f9cb37b2d99aebf",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11850",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-7175",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-50.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-50.html",
                  },
                  {
                     name: "https://code.wireshark.org/review/16965",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/16965",
                  },
                  {
                     name: "1036760",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1036760",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1396f6ad555178f6b81cc1a65f9cb37b2d99aebf",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=1396f6ad555178f6b81cc1a65f9cb37b2d99aebf",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11850",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11850",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-7175",
      datePublished: "2016-09-09T10:00:00",
      dateReserved: "2016-09-08T00:00:00",
      dateUpdated: "2024-08-06T01:50:47.527Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7701

Vulnerability from cvelistv5

Published

2017-04-12 23:00

Modified

2024-08-05 16:12

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/97632	vdb-entry, x_refsource_BID
	https://www.wireshark.org/security/wnpa-sec-2017-16.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038262	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201706-12	vendor-advisory, x_refsource_GENTOO
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=fa31f69b407436d0946f84baa0acdcc50962bf7a	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:12:27.740Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "97632",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/97632",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2017-16.html",
               },
               {
                  name: "1038262",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1038262",
               },
               {
                  name: "GLSA-201706-12",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201706-12",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=fa31f69b407436d0946f84baa0acdcc50962bf7a",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-04-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "97632",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/97632",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2017-16.html",
            },
            {
               name: "1038262",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1038262",
            },
            {
               name: "GLSA-201706-12",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201706-12",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=fa31f69b407436d0946f84baa0acdcc50962bf7a",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-7701",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "97632",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/97632",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2017-16.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2017-16.html",
                  },
                  {
                     name: "1038262",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1038262",
                  },
                  {
                     name: "GLSA-201706-12",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201706-12",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=fa31f69b407436d0946f84baa0acdcc50962bf7a",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=fa31f69b407436d0946f84baa0acdcc50962bf7a",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-7701",
      datePublished: "2017-04-12T23:00:00",
      dateReserved: "2017-04-11T00:00:00",
      dateUpdated: "2024-08-05T16:12:27.740Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-7177

Vulnerability from cvelistv5

Published

2016-09-09 10:00

Modified

2024-08-06 01:50

Severity ?

Summary

epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2016-52.html	x_refsource_CONFIRM
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750	x_refsource_CONFIRM
	https://code.wireshark.org/review/17096	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036760	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2016/dsa-3671	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e37b271c473e1cbd01d62ebe1f3b011fc9fe638	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T01:50:47.543Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-52.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/17096",
               },
               {
                  name: "1036760",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1036760",
               },
               {
                  name: "DSA-3671",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3671",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e37b271c473e1cbd01d62ebe1f3b011fc9fe638",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-09-07T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2016-09-27T14:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-52.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/17096",
            },
            {
               name: "1036760",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1036760",
            },
            {
               name: "DSA-3671",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3671",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e37b271c473e1cbd01d62ebe1f3b011fc9fe638",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-7177",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-52.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-52.html",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750",
                  },
                  {
                     name: "https://code.wireshark.org/review/17096",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/17096",
                  },
                  {
                     name: "1036760",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1036760",
                  },
                  {
                     name: "DSA-3671",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3671",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2e37b271c473e1cbd01d62ebe1f3b011fc9fe638",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2e37b271c473e1cbd01d62ebe1f3b011fc9fe638",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-7177",
      datePublished: "2016-09-09T10:00:00",
      dateReserved: "2016-09-08T00:00:00",
      dateUpdated: "2024-08-06T01:50:47.543Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-9374

Vulnerability from cvelistv5

Published

2016-11-17 05:48

Modified

2024-08-06 02:50

Severity ?

Summary

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2016-59.html	x_refsource_CONFIRM
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037313	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2016/dsa-3719	vendor-advisory, x_refsource_DEBIAN
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94369	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:50:37.387Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-59.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900",
               },
               {
                  name: "1037313",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037313",
               },
               {
                  name: "DSA-3719",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3719",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953",
               },
               {
                  name: "94369",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94369",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-11-16T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-27T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-59.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900",
            },
            {
               name: "1037313",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1037313",
            },
            {
               name: "DSA-3719",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3719",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953",
            },
            {
               name: "94369",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/94369",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-9374",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-59.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-59.html",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900",
                  },
                  {
                     name: "1037313",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1037313",
                  },
                  {
                     name: "DSA-3719",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3719",
                  },
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953",
                  },
                  {
                     name: "94369",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/94369",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-9374",
      datePublished: "2016-11-17T05:48:00",
      dateReserved: "2016-11-16T00:00:00",
      dateUpdated: "2024-08-06T02:50:37.387Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-7179

Vulnerability from cvelistv5

Published

2016-09-09 10:00

Modified

2024-08-06 01:50

Severity ?

Summary

Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

References

▼	URL	Tags
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752	x_refsource_CONFIRM
	https://www.wireshark.org/security/wnpa-sec-2016-54.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036760	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2016/dsa-3671	vendor-advisory, x_refsource_DEBIAN
	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b97fbddc23c065727b0147aab52a27c4aadffe7	x_refsource_CONFIRM
	https://code.wireshark.org/review/17095	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T01:50:47.520Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2016-54.html",
               },
               {
                  name: "1036760",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1036760",
               },
               {
                  name: "DSA-3671",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3671",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b97fbddc23c065727b0147aab52a27c4aadffe7",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://code.wireshark.org/review/17095",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-09-07T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2016-09-27T14:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.wireshark.org/security/wnpa-sec-2016-54.html",
            },
            {
               name: "1036760",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1036760",
            },
            {
               name: "DSA-3671",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3671",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b97fbddc23c065727b0147aab52a27c4aadffe7",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://code.wireshark.org/review/17095",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-7179",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752",
                     refsource: "CONFIRM",
                     url: "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752",
                  },
                  {
                     name: "https://www.wireshark.org/security/wnpa-sec-2016-54.html",
                     refsource: "CONFIRM",
                     url: "https://www.wireshark.org/security/wnpa-sec-2016-54.html",
                  },
                  {
                     name: "1036760",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1036760",
                  },
                  {
                     name: "DSA-3671",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3671",
                  },
                  {
                     name: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b97fbddc23c065727b0147aab52a27c4aadffe7",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b97fbddc23c065727b0147aab52a27c4aadffe7",
                  },
                  {
                     name: "https://code.wireshark.org/review/17095",
                     refsource: "CONFIRM",
                     url: "https://code.wireshark.org/review/17095",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-7179",
      datePublished: "2016-09-09T10:00:00",
      dateReserved: "2016-09-08T00:00:00",
      dateUpdated: "2024-08-06T01:50:47.520Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature