7789 matches found
CVE-2020-9428: Out-of-bounds Read
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing...
CVE-2020-9429: NULL Pointer Dereference
In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value...
PT-2020-20652
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.2.0 through 3.2.1 Description The WireGuard dissector could crash due to a certain data structure having a NULL value. This issue was addressed by handling the situation where the data structure intentionally has a NULL...
PT-2020-6563
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.6.0 through 2.6.14 Wireshark versions 3.0.0 through 3.0.8 Wireshark versions 3.2.0 through 3.2.1 Description The issue is related to a buffer data reading vulnerability that could allow a remote attacker to cause a denial ...
PT-2020-6573
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.6.0 through 2.6.14 Wireshark versions 3.0.0 through 3.0.8 Wireshark versions 3.2.0 through 3.2.1 Description The issue is related to insufficient input validation in the Wireshark program, which could allow a remote attack...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
Linux flow_dissector unauthorized access
The vulnerability of the flowdissector function in Linux operating systems is related to the use of the hash function jhash instead of siphash. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
Wireshark 3.0.x < 3.0.8 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.0.8. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.8 advisory. - In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in...
Wireshark 3.2.x < 3.2.1 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.1. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.1 advisory. - In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in...
Wireshark 3.2.x < 3.2.1 A Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 3.2.1. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.1 advisory. - In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by...
Wireshark Security Updates (wnpa-sec-2020-02) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Wireshark Security Updates (wnpa-sec-2020-02) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Security fix for the ALT Linux 10 package wireshark version 3.0.8-alt1
Jan. 21, 2020 Anton Farygin 3.0.8-alt1 - 3.0.8 - disabled sharkd build - fixes: BT ATT dissector crash. CVE-2020-7045...
MGASA-2020-0044 Updated wireshark packages fix security vulnerability
Updated wireshark packages fix security vulnerability: BT ATT dissector crash CVE-2020-7045...
Updated wireshark packages fix security vulnerability
Updated wireshark packages fix security vulnerability: BT ATT dissector crash CVE-2020-7045...
Linux kernel information disclosure vulnerability (CNVD-2020-03543)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in the flowdissector function in Linux kernel versions 4.3 through 5.x fixed in version 5.3.10. The vulnerability stems...
DEBIAN-CVE-2019-18282
The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash instead of siphash is used. The hashrn...
UBUNTU-CVE-2019-18282
The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash instead of siphash is used. The hashrn...
