CVE-2015-8734

The CVE-2015-8734 issue affects Wireshark 2.0.x prior to 2.0.1, where the NWP dissector (epan/dissectors/packet-nwp.c) mishandles the packet type, allowing remote attackers to cause a denial of service (application crash) with a crafted packet. The vulnerability is addressed by upgrading to Wires...

CVE-2015-8742

The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

CVE-2015-8734

The dissectnwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8720

The dissectberGeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8718

Wireshark vulnerability CVE-2015-8718: a double-free in epan/dissectors/packet-nlm.c (NLM dissector) can cause an application crash when the Match MSG/RES packets for async NLM option is enabled. Affected: Wireshark 1.12.x prior to 1.12.9 and 2.0.x prior to 2.0.1. Exploitation via crafted network...

CVE-2015-8717

Wireshark SDP dissector (epan/dissectors/packet-sdp.c) in Wireshark 1.12.x before 1.12.9 is vulnerable: it does not prevent use of a negative media count, enabling a remote attacker to crash the application via a crafted packet. Affected component: SDP dissector; root cause: negative media count ...

CVE-2015-8730

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers to cause a denial of service invalid read operation and application crash via a crafted packet...

CVE-2015-3182

epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8730

CVE-2015-8730 affects Wireshark NBAP dissector (epan/dissectors/packet-nbap.c): versions 1.12.x before 1.12.9 and 2.0.x before 2.0.1 do not validate the number of items in a crafted packet, enabling a denial of service via invalid read and crash. Affected products: Wireshark 1.12.x, 2.0.x; vulner...

CVE-2015-8724

CVE-2015-8724 affects Wireshark’s 802.11 dissector: the AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c does not verify the WPA broadcast key length. This can be exploited by a crafted packet to cause an out-of-bounds read and application crash (DoS). Affected releases include Wi...

CVE-2015-8711

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

CVE-2015-8718

Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async NLM" option is enabled, allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8731

The dissctrslipaccessmsg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV types, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted pack...

CVE-2015-8711

Wireshark NBAP dissector vulnerability (CVE-2015-8711) affects Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, where epan/dissectors/packet-nbap.c does not validate conversation data, enabling a crafted packet to trigger a NULL pointer dereference and application crash (DoS). Affected prod...

CVE-2015-8727

The dissectrsvpcommon function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain request-key data, which allows remote attackers to cause a denial of service use-after-free and application crash via a crafted...

CVE-2015-8722

epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

CVE-2015-8711

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

CVE-2015-8715

epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does not check for empty arguments, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2015-8717

The dissectsdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8740

Wireshark 2.0.x before 2.0.1 is affected by CVE-2015-8740 in the TDS dissector: the dissect_tds7_colmetadata_token function does not validate the number of columns, enabling remote attackers to induce a stack-based buffer overflow and crash the application via a crafted packet. Impact is a DoS; e...