CVE-2013-4079

The dissectschedulemessage function in epan/dissectors/packet-gsmcbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service infinite loop and application hang via a crafted packet...

CVE-2013-4082

The vwrread function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between a record length and a trailer length, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via...

CVE-2013-4076

Buffer overflow in the dissectiphccrtpfh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4079

The dissectschedulemessage function in epan/dissectors/packet-gsmcbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service infinite loop and application hang via a crafted packet...

CVE-2013-4081

The httppayloadsubdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause a denial of service stack consumption via a...

CVE-2013-4078

epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4080

The dissectr3upstreamcommandqueryconfig function in epan/dissectors/packet-assar3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.8 does not properly handle a zero-length item, which allows remote attackers to cause a denial of service infinite loop, and CPU and memory consumption...

CVE-2013-4075

epan/dissectors/packet-gmr1bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4080

The dissectr3upstreamcommandqueryconfig function in epan/dissectors/packet-assar3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.8 does not properly handle a zero-length item, which allows remote attackers to cause a denial of service infinite loop, and CPU and memory consumption...

CVE-2013-4078: Improper Input Validation

epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PT-2013-4834

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.15 Wireshark versions 1.8.x through 1.8.7 Description The issue is related to the dissect capwap data function in the CAPWAP dissector, which incorrectly handles a -1 data value to represent an error...

PT-2013-4836

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.7 Description A buffer overflow issue exists in the dissect iphc crtp fh function in the PPP dissector, allowing remote attackers to cause a denial of service by crashing the application via a crafted packe...

CVE-2013-4083: Improper Input Validation

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service application crash via a crafted...

CVE-2013-4074: Undefined Security Weakness

The dissectcapwapdata function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service application crash via a...

PT-2013-5283

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the dissect per length determinant function in the ASN.1 PER dissector, which does not initialize a length field in certain...

PT-2013-4843

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.15 Wireshark versions 1.8.x through 1.8.7 Wireshark version 1.10.0 Description The issue is related to the dissect pft function in the DCP ETSI dissector, which does not properly validate a certain fragment...

PT-2013-5275

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue is caused by an integer signedness error in the get type length function in the Bluetooth SDP dissector. This error allows remote attackers t...

PT-2013-5284

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the IsDFP Frame function in the PROFINET Real-Time dissector, which does not validate MAC addresses. This allows remote attackers to cause a denial of service,...

PT-2013-5279

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue allows remote attackers to cause a denial of service loop via a crafted packet that is not properly handled by the GSM RR dissector in the...

PT-2013-5282

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the netmon open function in the Netmon file parser, which does not initialize certain structure members. This allows remote...