VDB

CNVD-2016-02775

CNVD-2016-02775 PUBLISHED

Record from circl · Published May 1, 2016

Wireshark(前称Ethereal)是Wireshark团队开发的一套网络数据包分析软件。 Wireshark 1.12.10之前1.12.x版本和2.0.2之前2.x版本的ASN.1 BER解析器中的epan/dissectors/packet-ber.c文件存在拒绝服务漏洞。远程攻击者可通过指定深度嵌套数据的数据包,利用该漏洞造成拒绝服务(深度递归,栈资源消耗和应用程序崩溃)。

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2016-02775
vulnetix vdb fixes CNVD-2016-02775

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2016-02775/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›