CVE-2017-9344

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed in epan/dissectors/packet-btl2cap.c by validating an interval value...

CVE-2017-9349

CVE-2017-9349 affects the DICOM dissector in Wireshark from 2.0.0–2.0.12 and 2.2.0–2.2.6, where an infinite loop could be triggered. The root cause is a length value not being validated, leading to a looping condition. The issue was fixed upstream by validating the length in epan/dissectors/packe...

CVE-2017-9343

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address...

CVE-2017-9354

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was addressed in epan/dissectors/packet-rgmp.c by validating an IPv4 address...

CVE-2017-9347

In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID...

CVE-2017-9351

Wireshark DHCP dissector (versions 2.2.0–2.2.6 and 2.0.0–2.0.12) could read past the end of a buffer due to insufficient bounds checking when extracting the Vendor Class Identifier. Root cause: a bounds issue in epan/dissectors/packet-bootp.c. Fix implemented in the code path handling Vendor Clas...

CVE-2017-9353

The CVE-2017-9353 entry refers to Wireshark 2.2.0–2.2.6 where the IPv6 dissector could crash. The root cause, per the description, is an insufficient validation of IPv6 addresses in epan/dissectors/packet-ipv6.c, which could trigger a crash (reported as a potential denial of service in some advis...

CVE-2017-9343

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address...

CVE-2017-9343

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address...

CVE-2017-9348

In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value...

CVE-2017-9345

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers...

CVE-2017-9347

CVE-2017-9347 affects the Wireshark ROS dissector (versions 2.2.0–2.2.6). The issue is a NULL pointer dereference triggered by certain ROS packets, leading to a denial of service. The root cause is not fully detailed in all sources, but the fix was implemented in epan/dissectors/asn1/ros/packet-r...

CVE-2017-9348

CVE-2017-9348 – Wireshark DOF dissector buffer-read issue was caused by reading past the end of a buffer due to missing validation of a size value. Affected range: Wireshark 2.2.0 to 2.2.6. The root cause is inadequate size validation in the DOF dissector (epan/dissectors/packet-dof.c), which cou...

CVE-2017-9351

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully...

CVE-2017-9353

In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address...

CVE-2017-9343

Wireshark MSNIP dissector (affecting versions 2.2.0–2.2.6 and 2.0.0–2.0.12) is vulnerable due to a NULL pointer dereference caused by insufficient validation of an IPv4 address. The issue leads to denial of service (crash) when processing malicious packets or malformed traces. The root cause is i...

CVE-2017-9352

Wireshark CVE-2017-9352 affects the Bazaar (bzr) dissector: versions 2.2.0–2.2.6 and 2.0.0–2.0.12 can enter an infinite loop due to backwards parsing in epan/dissectors/packet-bzr.c. The fix was implemented by ensuring that backward parsing cannot occur. Technical details: affected products/versi...

CVE-2017-9354

Wireshark CVE-2017-9354 affects the RGMP dissector in Wireshark 2.2.0–2.2.6 and 2.0.0–2.0.12, where an IPv4 address validation issue in epan/dissectors/packet-rgmp.c could cause a crash. The issue has been addressed in the upstream code by validating the IPv4 address in the RGMP dissector. Public...

CVE-2017-9347

In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID...

CVE-2017-9348

In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value...