UBUNTU-CVE-2015-8742

The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

UBUNTU-CVE-2015-8740

The dissecttds7colmetadatatoken function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...

UBUNTU-CVE-2015-8719

The dissectdnsanswer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 Client Subnet option, which allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2015-8731

The dissctrslipaccessmsg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV types, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted pack...

UBUNTU-CVE-2015-8735

The getvalue function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute aka BT ATT dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service invalid write operation and application crash via a crafted packe...

UBUNTU-CVE-2015-8720

The dissectberGeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2015-8712

The dissecthsdschchannelinfo function in epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2015-8725

The dissectdiameterbaseframedipv6prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service stack-based buffer overflow...

CVE-2015-8719

CVE-2015-8719 affects Wireshark 1.12.x before 1.12.9. The DNS dissector (epan/dissectors/packet-dns.c) mishandles the EDNS0 Client Subnet option in dissect_dns_answer, enabling remote attackers to trigger an application crash (DoS) via a crafted packet. The impact is a denial of service with part...

CVE-2015-8713

CVE-2015-8713 affects Wireshark 1.12.x before 1.12.9. The UMTS FP dissector (epan/dissectors/packet-umts_fp.c) does not properly reserve memory for channel ID mappings, enabling an attacker to cause a denial of service via a crafted UDP/TCP packet that triggers out-of-bounds memory access and app...

CVE-2015-8738

The CVE-2015-8738 entry is supported by connected documents showing a DoS vulnerability in Wireshark 2.0.x before 2.0.1 via the S7COMM SZL handler. Specifically, the s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c does not validate the SZL response list count,...

CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8722

Wireshark SCTP dissector (epan/dissectors/packet-sctp.c) is affected by CVE-2015-8722. In Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, the frame pointer is not validated, allowing a crafted SCTP packet to trigger a NULL pointer dereference and cause a denial of service (application cras...

CVE-2015-8731

Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 are affected by CVE-2015-8731 in the RSL dissector (epan/dissectors/packet-rsl.c): not rejecting unknown TLV types can cause an out-of-bounds read and application crash via a crafted packet (DoS). Remediation: upgrade to Wireshark 1.12.9 or 2....

CVE-2015-8727

CVE-2015-8727 : In the Wireshark RSVP dissector (epan/dissectors/packet-rsvp.c), the function dissect_rsvp_common does not properly maintain request-key data in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, enabling remote attackers to cause a denial of service (use-after-free and applic...

CVE-2015-3182

epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8717

The dissectsdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8740

The dissecttds7colmetadatatoken function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...

CVE-2015-8739

The ipmifmtudpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

CVE-2015-8725

The dissectdiameterbaseframedipv6prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service stack-based buffer overflow...