# CVEs published 2015-03-08

7 CVEs were published on March 8, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0228](https://cve.now/CVE-2015-0228.md): The lua\_websocket\_read function in lua\_request.c in the mod\_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to c (no CVSS)
- [CVE-2015-2187](https://cve.now/CVE-2015-2187.md): The dissect\_atn\_cpdlc\_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12 (no CVSS)
- [CVE-2015-2188](https://cve.now/CVE-2015-2188.md): epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a (no CVSS)
- [CVE-2015-2189](https://cve.now/CVE-2015-2189.md): Off-by-one error in the pcapng\_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x bef (no CVSS)
- [CVE-2015-2190](https://cve.now/CVE-2015-2190.md): epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote (no CVSS)
- [CVE-2015-2191](https://cve.now/CVE-2015-2191.md): Integer overflow in the dissect\_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and (no CVSS)
- [CVE-2015-2192](https://cve.now/CVE-2015-2192.md): Integer overflow in the dissect\_osd2\_cdb\_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-03-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.