20296 matches found
CVE-2012-6061
CVE-2012-6061 affects the Wireshark WTP dissector. The dissect_wtp_common function in epan/dissectors/packet-wtp.c uses an incorrect data type for a length field, enabling a crafted packet to trigger an integer overflow and infinite loop, causing denial of service. Affected products/versions: Wir...
CVE-2012-5602
CVE-2012-5602 is rejected and not used; reference CVE-2012-6058.
CVE-2012-6056
CVE-2012-6056: Wireshark’s SCTP dissector (epan/dissectors/packet-sctp.c) contains an integer overflow in dissect_sack_chunk that can cause a denial of service (infinite loop) when processing a crafted Duplicate TSN count in Wireshark 1.8.x prior to 1.8.4. Connected documents show affected releas...
CVE-2012-6060
Wireshark vulnerability CVE-2012-6060: Integer overflow in dissect_iscsi_pdu in epan/dissectors/packet-iscsi.c of the iSCSI dissector can be exploited by a malformed packet to trigger a denial of service (infinite loop). Affected products/versions: Wireshark 1.6.x before 1.6.12 and 1.8.x before 1...
CVE-2012-3317
CVE-2012-3317 affects IBM WebSphere Message Broker: versions 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 have incorrect ownership of certain uninstaller JRE files, which may allow local users to gain privileges via access to uid 501 or gid 300. The root cause is improper file ...
CVE-2012-6055
Wireshark 1.8.x before 1.8.4 is affected by multiple DoS vulnerabilities across several dissectors (USB, sFlow, SCTP, EIGRP, ISAKMP, iSCSI, WTP, RTCP, 3GPP2 A11) caused by crafted packets or zero/invalid length values that trigger infinite loops or crashes. Remediation: upgrade to Wireshark 1.8.4...
CVE-2012-5600
CVE-2012-5600 is a rejected reservation duplicate of CVE-2012-6062 and not an active vulnerability entry.
CVE-2012-6054
Wireshark CVE-2012-6054 affects the sFlow dissector (epan/dissectors/packet-sflow.c) in Wireshark 1.8.x prior to 1.8.4. The root cause is improper length handling for an invalid IP address type, allowing a remote attacker to trigger a denial of service via an invalid IP type packet that is neithe...
CVE-2012-5593
Wireshark 1.8.x before 1.8.4 is affected by CVE-2012-5593 (USB dissector DoS). The USB dissector in epan/dissectors/packet-usb.c can loop indefinitely when processing crafted data, leading to denial of service. Vendors openSUSE SUSE-SU-2013:0238-1 and openSUSE/SUSE advisories list CVE-2012-5593 a...
CVE-2012-4608
CVE-2012-4608 refers to a CSRF vulnerability in the web interface of EMC RSA NetWitness Informer prior to version 2.0.5.6. The flaw could allow an attacker to hijack the authentication of an authenticated user through cross-site requests. Affected product: RSA NetWitness Informer web interface; a...
CVE-2012-5597
CVE-2012-5597 is rejected; this CVE ID is not used and does not represent an active vulnerability entry.
CVE-2012-6058
CVE-2012-6058 : Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 is vulnerable to an integer overflow in the ICMPv6 dissector (epan/dissectors/packet-icmpv6.c) that can be exploited by a crafted Number of Sources value to trigger a denial of service (infinite loop). Remediation: upgrade to Wi...
CVE-2012-6057
Wireshark 1.8.x before 1.8.4 contains a vulnerability in the EIGRP dissector (epan/dissectors/packet-eigrp.c) where the code uses the wrong data type for a specific offset. This allows remote attackers to trigger a denial of service via a malformed EIGRP packet (integer overflow and infinite loop...