5785 matches found
CVE-2020-9428
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing...
CVE-2020-9429
In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value...
CVE-2020-9429
In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value...
CVE-2020-9429
Wireshark (3.2.0–3.2.1) contained a crash in the WireGuard dissector caused by how a particular data structure could be NULL. The issue was fixed in epan/dissectors/packet-wireguard.c by handling that NULL scenario. Public references indicate remediation via upgrading to Wireshark 3.2.2 or later ...
CVE-2020-9430
CVE-2020-9430 affects Wireshark’s WiMax DLMAP dissector, crashing versions 3.2.0–3.2.1, 3.0.0–3.0.8, and 2.6.0–2.6.14. Root cause: length field validation flaw in dissector code (plugins/epan/wimax/msg_dlmap.c). Fix: added validation of the length field. Public references describe attacker-trigge...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
The vulnerability of the flow_dissector function in Linux operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the flowdissector function in Linux operating systems is related to the use of the hash function jhash instead of siphash. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
Wireshark 3.0.x < 3.0.8 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.0.8. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.8 advisory. - In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in...
Wireshark 3.2.x < 3.2.1 A Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 3.2.1. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.1 advisory. - In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by...
Wireshark 3.2.x < 3.2.1 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.1. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.1 advisory. - In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in...
Wireshark Security Updates (wnpa-sec-2020-02) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Wireshark Security Updates (wnpa-sec-2020-02) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Security fix for the ALT Linux 10 package wireshark version 3.0.8-alt1
Jan. 21, 2020 Anton Farygin 3.0.8-alt1 - 3.0.8 - disabled sharkd build - fixes: BT ATT dissector crash. CVE-2020-7045...
MGASA-2020-0044 Updated wireshark packages fix security vulnerability
Updated wireshark packages fix security vulnerability: BT ATT dissector crash CVE-2020-7045...
Updated wireshark packages fix security vulnerability
Updated wireshark packages fix security vulnerability: BT ATT dissector crash CVE-2020-7045...
Linux kernel information disclosure vulnerability (CNVD-2020-03543)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in the flowdissector function in Linux kernel versions 4.3 through 5.x fixed in version 5.3.10. The vulnerability stems...
DEBIAN-CVE-2019-18282
The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash instead of siphash is used. The hashrn...
UBUNTU-CVE-2019-18282
The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash instead of siphash is used. The hashrn...
