CVE-2020-26575: Loop with Unreachable Exit Condition

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

PT-2020-5494

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.6.0 through 2.6.20 Wireshark versions 3.0.0 through 3.0.13 Wireshark versions 3.2.0 through 3.2.6 Description The issue exists due to insufficient input validation in Wireshark, which could allow a remote attacker to cause...

PT-2020-5500

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.6.0 through 2.6.20 Wireshark versions 3.0.0 through 3.0.13 Wireshark versions 3.2.0 through 3.2.6 Description The issue is related to a lack of integrity check in the epan/dissectors/packet-tcp.c function of Wireshark, whi...

PT-2020-5493

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.0.0 through 3.0.13 Wireshark versions 3.2.0 through 3.2.6 Description The issue is related to a NULL pointer dereference in the BLIP protocol dissector due to a buffer being sized for compressed messages, not uncompressed...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service DoS. The vulnerability exists as the CMS dissector could crash if an object identifier was set to NULL after a ContentInfo dissection...

Denial Of Service (DoS)

Wireshark is vulnerable to denial of service. An attacker is able to crash the EAP dissector due to insecure sscanf parsing...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service DoS. The vulnerability exists as the LTE RRC dissector could leak memory through append operations...

Denial Of Service (DoS)

Wireshark is vulnerable to denial of service. The WiMax DLMAP dissector could crash due to a flaw in plugins/epan/wimax/msgdlmap.c which misses validation of a length field...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. An attacker is able to crash the MIME Multipart dissector by injecting a malformed packet onto the wire or by convincing a user to read a malicious packet trace file...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service DoS. The vulnerability exists as the Gryphon dissector could go into an infinite loop when a message length of zero is passed into plugins/epan/gryphon/packet-gryphon.c...

Wireshark 2.6.x < 2.6.20 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.6.20. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.20 advisory. - In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could...

Wireshark 3.0.x < 3.0.14 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.0.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.0.14 advisory. - In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. A remote attacker is able to crash the RPCAP dissector in epan/dissectors/packet-rpcap.c via a NULL pointer dereference...

Denial Of Service (DoS)

Wireshark is vulnerable to denial of service DoS. The DOF dissector could crash due to a flaw in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes...

Denial Of Service (DoS)

Wireshark is vulnerable to denial of service. An attacker is able to crash the LDSS dissector via malicious file digests...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service DoS. The vulnerability exists as the TCAP dissector could crash through a NULL pointer dereference...

Double Free

Wireshark is vulnerable double free. Due to a flaw in epan/dissectors/packet-kafka.c, it causes a double free during LZ4 decompression,crashing the Kafka protocol dissector...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. An infinite loop in the GVCP dissector results in an denial of service condition...

Debian: Security Advisory (DLA-2354-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2354-1] ndpi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2354-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 29, 2020 https://wiki.debian.org/LTS -...