# CVEs published 2016-05-01

8 CVEs were published on May 1, 2016: 0 critical, 1 high. Days are UTC.

- [CVE-2016-4415](https://cve.now/CVE-2016-4415.md): wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows rem (no CVSS)
- [CVE-2016-4416](https://cve.now/CVE-2016-4416.md): epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.2 mishandles the Grouping subfield, which allows (no CVSS)
- [CVE-2016-4417](https://cve.now/CVE-2016-4417.md): Off-by-one error in epan/dissectors/packet-gsm\_abis\_oml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2 (no CVSS)
- [CVE-2016-4418](https://cve.now/CVE-2016-4418.md): epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to c (no CVSS)
- [CVE-2016-4419](https://cve.now/CVE-2016-4419.md): epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attacker (no CVSS)
- [CVE-2016-4420](https://cve.now/CVE-2016-4420.md): The NFS dissector in Wireshark 2.x before 2.0.2 allows remote attackers to cause a denial of service (application crash) via a crafted packe (no CVSS)
- [CVE-2016-4421](https://cve.now/CVE-2016-4421.md): epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to c (no CVSS)
- [CVE-2015-8325](https://cve.now/CVE-2015-8325.md): The do\_setup\_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read (CVSS 7.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-05-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.