# CVEs published 2016-01-04

33 CVEs were published on January 4, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-3182](https://cve.now/CVE-2015-3182.md): epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return va (no CVSS)
- [CVE-2015-8711](https://cve.now/CVE-2015-8711.md): epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation (no CVSS)
- [CVE-2015-8712](https://cve.now/CVE-2015-8712.md): The dissect\_hsdsch\_channel\_info function in epan/dissectors/packet-umts\_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does (no CVSS)
- [CVE-2015-8713](https://cve.now/CVE-2015-8713.md): epan/dissectors/packet-umts\_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID (no CVSS)
- [CVE-2015-8714](https://cve.now/CVE-2015-8714.md): The dissect\_dcom\_OBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initializ (no CVSS)
- [CVE-2015-8715](https://cve.now/CVE-2015-8715.md): epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does not check for empty arguments, which allows (no CVSS)
- [CVE-2015-8716](https://cve.now/CVE-2015-8716.md): The init\_t38\_info\_conv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that (no CVSS)
- [CVE-2015-8717](https://cve.now/CVE-2015-8717.md): The dissect\_sdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a ne (no CVSS)
- [CVE-2015-8718](https://cve.now/CVE-2015-8718.md): Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, whe (no CVSS)
- [CVE-2015-8719](https://cve.now/CVE-2015-8719.md): The dissect\_dns\_answer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 (no CVSS)
- [CVE-2015-8720](https://cve.now/CVE-2015-8720.md): The dissect\_ber\_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x be (no CVSS)
- [CVE-2015-8721](https://cve.now/CVE-2015-8721.md): Buffer overflow in the tvb\_uncompress function in epan/tvbuff\_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote (no CVSS)
- [CVE-2015-8722](https://cve.now/CVE-2015-8722.md): epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame poi (no CVSS)
- [CVE-2015-8723](https://cve.now/CVE-2015-8723.md): The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 (no CVSS)
- [CVE-2015-8724](https://cve.now/CVE-2015-8724.md): The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x bef (no CVSS)
- [CVE-2015-8725](https://cve.now/CVE-2015-8725.md): The dissect\_diameter\_base\_framed\_ipv6\_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x bef (no CVSS)
- [CVE-2015-8726](https://cve.now/CVE-2015-8726.md): wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and M (no CVSS)
- [CVE-2015-8727](https://cve.now/CVE-2015-8727.md): The dissect\_rsvp\_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2 (no CVSS)
- [CVE-2015-8728](https://cve.now/CVE-2015-8728.md): The Mobile Identity parser in (1) epan/dissectors/packet-ansi\_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm\_a\_common.c in t (no CVSS)
- [CVE-2015-8729](https://cve.now/CVE-2015-8729.md): The ascend\_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not (no CVSS)
- [CVE-2015-8730](https://cve.now/CVE-2015-8730.md): epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of (no CVSS)
- [CVE-2015-8731](https://cve.now/CVE-2015-8731.md): The dissct\_rsl\_ipaccess\_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before (no CVSS)
- [CVE-2015-8732](https://cve.now/CVE-2015-8732.md): The dissect\_zcl\_pwr\_prof\_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12 (no CVSS)
- [CVE-2015-8733](https://cve.now/CVE-2015-8733.md): The ngsniffer\_process\_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2 (no CVSS)
- [CVE-2015-8734](https://cve.now/CVE-2015-8734.md): The dissect\_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, wh (no CVSS)
- [CVE-2015-8735](https://cve.now/CVE-2015-8735.md): The get\_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 u (no CVSS)
- [CVE-2015-8736](https://cve.now/CVE-2015-8736.md): The mp2t\_find\_next\_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trai (no CVSS)
- [CVE-2015-8737](https://cve.now/CVE-2015-8737.md): The mp2t\_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allow (no CVSS)
- [CVE-2015-8738](https://cve.now/CVE-2015-8738.md): The s7comm\_decode\_ud\_cpu\_szl\_subfunc function in epan/dissectors/packet-s7comm\_szl\_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2 (no CVSS)
- [CVE-2015-8739](https://cve.now/CVE-2015-8739.md): The ipmi\_fmt\_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to (no CVSS)
- [CVE-2015-8740](https://cve.now/CVE-2015-8740.md): The dissect\_tds7\_colmetadata\_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not va (no CVSS)
- [CVE-2015-8741](https://cve.now/CVE-2015-8741.md): The dissect\_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-h (no CVSS)
- [CVE-2015-8742](https://cve.now/CVE-2015-8742.md): The dissect\_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not valid (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
