CVE-2016-5351

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOLRSNKEY, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-5352

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-5352

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-5352

Technical details for CVE-2016-5352 are not provided in the connected documents. The Initial description mentions a DoS via crafted IEEE 802.11 packets in Wireshark 2.x before 2.0.4, with no further specifics.

CVE-2014-9902

Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 2013 devices allows remote attackers to execute arbitrary code via a crafted Information Element IE in an 802.11 management frame, aka Android internal bug 28668638 and...

Buffer overflow

Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 2013 devices allows remote attackers to execute arbitrary code via a crafted Information Element IE in an 802.11 management frame, aka Android internal bug 28668638 and...

CVE-2014-9902

Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 2013 devices allows remote attackers to execute arbitrary code via a crafted Information Element IE in an 802.11 management frame, aka Android internal bug 28668638 and...

CVE-2014-9902

CVE-2014-9902 involves a buffer overflow in the Qualcomm Wi‑Fi driver’s file CORE/SYS/legacy/src/utils/src/dot11f.c on Nexus 7 (2013) devices. An attacker could trigger arbitrary code execution by sending a crafted Information Element in an 802.11 management frame, exploiting the vulnerability in...

The vulnerability of the Cisco Wireless LAN Controller 5500 software allows a malicious individual to cause service failure.

The vulnerability in Cisco Wireless LAN Controller WLC devices allows malicious actors to trigger a service failure device reboot by using specially crafted Ethernet frames based on 802.11 protocols...

The vulnerability of the Cisco Wireless LAN Controller 2100 software allows a malicious individual to cause service failure.

The vulnerability in Cisco Wireless LAN Controller WLC devices allows malicious actors to trigger a service failure device reboot by using specially crafted Ethernet frames based on 802.11 protocols...

The vulnerability of the Cisco Wireless LAN Controller 4100 software allows a malicious individual to cause service failure.

The vulnerability in Cisco Wireless LAN Controller WLC devices allows malicious actors to trigger a service failure device reboot by using specially crafted Ethernet frames based on 802.11 protocols...

The vulnerability of the Cisco Wireless LAN Controller 2000 software allows a malicious individual to cause service failure.

The vulnerability in Cisco Wireless LAN Controller WLC devices allows malicious actors to trigger a service failure device reboot by using specially crafted Ethernet frames based on 802.11 protocols...

The vulnerability of the Cisco Wireless LAN Controller 2500 software allows a malicious individual to cause service failure.

The vulnerability in Cisco Wireless LAN Controller WLC devices allows malicious actors to trigger a service failure device reboot by using specially crafted Ethernet frames based on 802.11 protocols...

FreeBSD : wireshark -- multiple vulnerabilities (313e9557-41e8-11e6-ab34-002590263bf5)

Wireshark development team reports : The following vulnerabilities have been fixed : - wnpa-sec-2016-29 The SPOOLS dissector could go into an infinite loop. Discovered by the CESG. - wnpa-sec-2016-30 The IEEE 802.11 dissector could crash. Bug 11585 - wnpa-sec-2016-31 The IEEE 802.11 dissector cou...

DSA-3615-1 wireshark - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3615-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

F5 Networks BIG-IP : Multiple Wireshark (tshark) vulnerabilities (K01837042)

CVE-2015-8711 epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

Wireshark 2.0.x < 2.0.4 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.4 advisory. - epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the...

Wireshark 1.12.x < 1.12.12 Multiple DoS

The version of Wireshark installed on the remote Windows host is 1.12.x prior to 1.12.12. It is, therefore, affected by multiple denial of service vulnerabilities : - An infinite loop exists in the SPOOLs dissector. A remote attacker, via a specially crafted packet or trace file, can exploit this...

Updated wireshark packages fix security vulnerability

Updated wireshark packages fix security vulnerabilities: The SPOOLS dissector could go into an infinite loop CVE-2016-5350. The IEEE 802.11 dissector could crash CVE-2016-5351. The IEEE 802.11 dissector could crash CVE-2016-5352. The UMTS FP dissector could crash CVE-2016-5353. Some USB dissector...