312 matches found
SUSE CVE-2021-39924
Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...
SUSE CVE-2021-44847
A stack-based buffer overflow in handlerequest function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 caused by an improper length calculation during the handling of received network packets allows remote attackers to crash the process or potentially execute arbitrary code via...
libraw:libraw_nef_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5798324217446400 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
libraw:libraw_nef_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5436677686689792 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
libraw:libraw_nef_fuzzer: Use-of-uninitialized-value in DHT::make_rbdiag
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4614875880226816 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
GLSA-202210-04 : Wireshark: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202210-04 Wireshark: Multiple Vulnerabilities - Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file CVE-2021-22235 - NULL pointer exception i...
PT-2022-7529
Name of the Vulnerable Software and Affected Versions GlusterFS version 11.0 Description The issue is related to a use-after-free error in the dht setxattr mds cbk function of the xlators/cluster/dht/src/dht-common.c component in the GlusterFS file system. This allows a remote attacker to cause a...
BitTorrent DHT Traffic Analyzer Wireshark DoS
The vulnerability of BitTorrent DHT traffic analyzer software from Wireshark involves executing a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted packets...
libraw:libraw_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4834098805342208 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
Denial Of Service (DoS)
wireshark:edge is vulnerable to denial of service. Infinite loop in the BitTorrent DHT dissector allows denial of service via packet injection or crafted capture file...
Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
...
Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
...
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
...
CVE-2021-4184
An infinite-loop flaw was found in Wireshark's DHT dissector module. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt, crash or go into an infinite loop...
Wireshark BitTorrent DHT Parser Denial of Service Vulnerability
Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.Gryphon dissector is one of the Gryphon protocol parsers. A security vulnerability exists in...
CVE-2021-4184
Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...
AZL-7419 CVE-2021-4184 affecting package wireshark for versions less than 3.4.14-1
Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...
DEBIAN-CVE-2021-4184
Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...
