CVE-2016-2529
published 2016-02-28CVE-2016-2529: The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the…
PriorityP417medium5.5CVSS 3.0
AVLACLPRNUIRSUCNINAH
EPSS
1.23%
65.9th percentile
The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL" substring, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wireshark | < wireshark 2.0.2+ga16e22e-1 (bookworm) | wireshark 2.0.2+ga16e22e-1 (bookworm) |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 0 < 2.0.2+ga16e22e-1 | 2.0.2+ga16e22e-1 |
| wireshark | wireshark | >= 0 < 2.0.2+ga16e22e-1 | 2.0.2+ga16e22e-1 |
| wireshark | wireshark | >= 0 < 2.0.2+ga16e22e-1 | 2.0.2+ga16e22e-1 |
| wireshark | wireshark | >= 0 < 2.0.2+ga16e22e-1 | 2.0.2+ga16e22e-1 |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
wireshark: iSeries file parser crash (wnpa-sec-2016-09)
vendor_redhat·2016-02-26·CVSS 5.5
CVE-2016-2529 [MEDIUM] wireshark: iSeries file parser crash (wnpa-sec-2016-09)
wireshark: iSeries file parser crash (wnpa-sec-2016-09)
The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL" substring, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
Package: wireshark (Red Hat Enterprise Linux 5) - Not affected
Package: wireshark (Red Hat Enterprise Linux 6) - Not affected
Package: wireshark (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2016-2529: wireshark - The iseries_check_file_type function in wiretap/iseries.c in the iSeries file pa...
vendor_debian·2016·CVSS 5.5
CVE-2016-2529 [MEDIUM] CVE-2016-2529: wireshark - The iseries_check_file_type function in wiretap/iseries.c in the iSeries file pa...
The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL" substring, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
Scope: local
bookworm: resolved (fixed in 2.0.2+ga16e22e-1)
bullseye: resolved (fixed in 2.0.2+ga16e22e-1)
forky: resolved (fixed in 2.0.2+ga16e22e-1)
sid: resolved (fixed in 2.0.2+ga16e22e-1)
trixie: resolved (fixed in 2.0.2+ga16e22e-1)
GHSA
GHSA-pwvw-mxpg-9856: The iseries_check_file_type function in wiretap/iseries
ghsa_unreviewed·2022-05-17
CVE-2016-2529 [MEDIUM] CWE-119 GHSA-pwvw-mxpg-9856: The iseries_check_file_type function in wiretap/iseries
The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL" substring, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
OSV
CVE-2016-2529: The iseries_check_file_type function in wiretap/iseries
osv·2016-02-28·CVSS 5.5
CVE-2016-2529 [MEDIUM] CVE-2016-2529: The iseries_check_file_type function in wiretap/iseries
The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL" substring, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-3107 pulp: Node certificate containing private key stored in world-readable file
bugzilla·2016-04-11·CVSS 5.5
CVE-2016-3107 [MEDIUM] CVE-2016-3107 pulp: Node certificate containing private key stored in world-readable file
CVE-2016-3107 pulp: Node certificate containing private key stored in world-readable file
It was reported that Pulp node certificates containing private keys are stored in /etc/pki/pulp/nodes/ directory as world-readable.
Discussion:
Acknowledgments:
Name: Randy Barlow (Red Hat), Jeremy Cline (Red Hat)
---
Created attachment 1145987
Proposed patch
---
Created attachment 1146471
Proposed patch
I am amending the proposed patch to use the -Z flag on mv, and to credit jcline in the commit message for independently reporting the issue.
---
This issue is filed upstream as #1833 and is fixed by PR #2529:
https://pulp.plan.io/issues/1833
https://github.com/pulp/pulp/pull/2529
---
The Pulp upstream bug status is at CLOSED - WORKSFORME. Updating the external tracker on this bug.
---
Bugzilla
CVE-2016-2529 wireshark: iSeries file parser crash (wnpa-sec-2016-09)
bugzilla·2016-02-29·CVSS 5.5
CVE-2016-2529 [MEDIUM] CVE-2016-2529 wireshark: iSeries file parser crash (wnpa-sec-2016-09)
CVE-2016-2529 wireshark: iSeries file parser crash (wnpa-sec-2016-09)
It was reported that Wireshark's iSeries file parser could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
Upstream bug(s):
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11985
External References:
https://www.wireshark.org/security/wnpa-sec-2016-09.html
Discussion:
(In reply to Martin Prpic from comment #0)
> External References:
>
> https://www.wireshark.org/security/wnpa-sec-2016-09.html
The upstream advisory lists an incorrect CVE, it should be 2016, not 2015.
http://www.securitytracker.com/id/1035118http://www.wireshark.org/security/wnpa-sec-2016-09.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11985https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=96d585a5e9baef21e1eea8505d78305b034dc80ehttps://security.gentoo.org/glsa/201604-05http://www.securitytracker.com/id/1035118http://www.wireshark.org/security/wnpa-sec-2016-09.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11985https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=96d585a5e9baef21e1eea8505d78305b034dc80ehttps://security.gentoo.org/glsa/201604-05
2016-02-28
Published