A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function.

...

ROS-20250826-04

Vulnerability of Wireshark computer network traffic analyzer related to insufficient validation of user data in the column utility module of the Dissection engine. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in the CBOR...

wireshark:fuzzshark_ip: Index-out-of-bounds in dissect_oran_c_section

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5720655703375872 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerubsanwireshark Platform Id: linux Crash Type...

Security update for wireshark

This update for wireshark fixes the following issues: CVE-2025-5601: Dissection engine crash bsc1244081. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

SUSE-SU-2025:02272-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2025-5601: Dissection engine crash bsc1244081...

Security update for wireshark

This update for wireshark fixes the following issues: CVE-2025-5601: Dissection engine crash bsc1244081. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

SUSE-SU-2025:02271-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2025-5601: Dissection engine crash bsc1244081...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wireshark (SUSE-SU-2025:01968-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01968-1 advisory. - CVE-2025-5601: Dissection engine crash bsc1244081. Tenable has extracted the preceding description blo...

Security update for wireshark

This update for wireshark fixes the following issues: CVE-2025-5601: Dissection engine crash bsc1244081. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

SUSE-SU-2025:01968-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2025-5601: Dissection engine crash bsc1244081...

Wireshark Security Update (wnpa-sec-2025-02) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

wireshark:fuzzshark_udp_port-dns: Heap-buffer-overflow in make_local_part_domain

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6395620455940096 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkudpport-dns Job Type: aflasanwireshark Platform Id: linux Crash Type:...

K000150344: Multiple Wireshark/tshark vulnerabilities

Security Advisory Description CVE-2019-5721 In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided. CVE-2019-5719 In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to...

K000150336: Wireshark/tshark vulnerabilities CVE-2019-9214, CVE-2019-9208, CVE-2019-13619, CVE-2019-10903, and CVE-2019-10901

Security Advisory Description CVE-2019-9214 In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation. CVE-2019-9208 In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in Flow::dissectBittorrent

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=6688027426750464 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ntopng:fuzz_dissect_packet: Crash in Flow::processExtraDissectedInformation

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5372142653079552 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8000 Crash...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in ___interceptor_strncpy

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=6343024707960832 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

PT-2025-5669 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash occurs in the following functions:...

ntopng:fuzz_dissect_packet: Segv on unknown address in ___interceptor_free

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=6599096806211584 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ndpi:fuzz_ndpi_reader_pl7m: Use-of-uninitialized-value in keep_extra_dissection

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4576116020412416 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireaderpl7m Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...