5757 matches found
UBUNTU-CVE-2014-6422
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
Design/Logic Flaw
Off-by-one error in the isrtsprequestorreply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service application crash via a crafted packet that triggers parsing of a token...
Code injection
The dissectspdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
CVE-2014-6428
The dissectspdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
CVE-2014-6421
Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...
Code injection
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
CVE-2014-6423
Wireshark vulnerability CVE-2014-6423 affects the MEGACO dissector (epan/dissectors/packet-megaco.c). The issue allows remote attackers to trigger an infinite loop DoS by sending a crafted packet containing an empty line. Affected families are Wireshark 1.10.x prior to 1.10.10 and 1.12.x prior to...
CVE-2014-6421
Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...
CVE-2014-6421
CVE-2014-6421 affects Wireshark 1.10.x before 1.10.10. It is a use-after-free in the SDP dissector caused by split memory ownership between the SDP and RTP dissectors, enabling a remote attacker to trigger a denial-of-service (application crash) with a crafted packet. Connected advisories list CV...
CVE-2014-6426
The dissecthiptlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle a NULL tree, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...
CVE-2014-6422
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
CVE-2014-6423
The tvbrawtextadd function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service infinite loop via an empty line...
CVE-2014-6426
CVE-2014-6426 affects the Wireshark HIP dissector (epan/dissectors/packet-hip.c) in Wireshark 1.12.x before 1.12.1. The root cause is improper handling of a NULL tree in the dissect_hip_tlv function, which allows remote attackers to cause a denial-of-service via a crafted packet (infinite loop). ...
CVE-2014-6422
CVE-2014-6422 affects Wireshark 1.10.x before 1.10.10, where the SDP dissector creates duplicate hashtables for a media channel, enabling a remote attacker to cause a denial of service (application crash) via a crafted RTP packet. A fix is available in Wireshark 1.10.10 and later; upgrading to or...
CVE-2014-6421
Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...
CVE-2014-6428
The dissectspdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
CVE-2014-6424
The dissectv9v10pdudata function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 refers to incorrect offset and start variables, which allows remote attackers to cause a denial of service uninitialized memory read and...
CVE-2014-6422
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
openSUSE Security Update : wireshark (openSUSE-SU-2014:1038-1)
This wireshark version update to 1.10.9 fixes the following security issues : - fixes several crashes triggered by malformed protocol packages - The Catapult DCT2000 and IrDA dissectors could underrun a buffer wnpa-sec-2014-08 CVE-2014-5161 CVE-2014-5162 bnc889901 - The GSM Management dissector...