# CVEs published 2016-02-28

12 CVEs were published on February 28, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-2521](https://cve.now/CVE-2016-2521.md): Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark\_application.cpp in Wireshark 1.12.x before 1.12.10 (no CVSS)
- [CVE-2016-2522](https://cve.now/CVE-2016-2522.md): The dissect\_ber\_constrained\_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 do (no CVSS)
- [CVE-2016-2523](https://cve.now/CVE-2016-2523.md): The dnp3\_al\_process\_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x befor (no CVSS)
- [CVE-2016-2524](https://cve.now/CVE-2016-2524.md): epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote at (no CVSS)
- [CVE-2016-2525](https://cve.now/CVE-2016-2525.md): epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allow (no CVSS)
- [CVE-2016-2526](https://cve.now/CVE-2016-2526.md): epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote (no CVSS)
- [CVE-2016-2527](https://cve.now/CVE-2016-2527.md): wiretap/nettrace\_3gpp\_32\_423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\\0' character (no CVSS)
- [CVE-2016-2528](https://cve.now/CVE-2016-2528.md): The dissect\_nhdr\_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate le (no CVSS)
- [CVE-2016-2529](https://cve.now/CVE-2016-2529.md): The iseries\_check\_file\_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that (no CVSS)
- [CVE-2016-2530](https://cve.now/CVE-2016-2530.md): The dissct\_rsl\_ipaccess\_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x befor (no CVSS)
- [CVE-2016-2531](https://cve.now/CVE-2016-2531.md): Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remot (no CVSS)
- [CVE-2016-2532](https://cve.now/CVE-2016-2532.md): The dissect\_llrp\_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x bef (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-02-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.