5785 matches found
UBUNTU-CVE-2014-5165
The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packe...
CVE-2014-5164
The rlcdecodeli function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows remote attackers to cause a denial of service application crash via a crafted packet...
CVE-2014-5164
The rlcdecodeli function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows remote attackers to cause a denial of service application crash via a crafted packet...
CVE-2014-5165
Wireshark 1.10.x before 1.10.9 is affected by CVE-2014-5165 in the ASN.1 BER dissector (dissect_ber_constrained_bitstring). The parser does not properly validate padding values, allowing remote attackers to trigger a denial of service (buffer underflow and crash) via crafted packets. Evidence acr...
unbreakable enterprise kernel security update
kernel-uek 3.8.13-35.3.2.el7uek - l2tp: fix an unprivileged user to kernel privilege escalation Sasha Levin Orabug: 19229497 CVE-2014-4943 CVE-2014-4943 - ptrace,x86: force IRET path after a ptracestop Tejun Heo Orabug: 19230689 CVE-2014-4699 - net: flowdissector: fail on evil iph-ihl Jason Wang...
unbreakable enterprise kernel security update
kernel-uek 3.8.13-35.1.3.el6uek - l2tp: fix an unprivileged user to kernel privilege escalation Sasha Levin Orabug: 19229497 CVE-2014-4943 CVE-2014-4943 - ptrace,x86: force IRET path after a ptracestop Tejun Heo Orabug: 19230689 CVE-2014-4699 - net: flowdissector: fail on evil iph-ihl Jason Wang...
Wireshark ZigBee ZCL Dissector Infinite Loop Denial of Service
No description provided by source. Source: http://www.securityfocus.com/bid/44986/info Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets. Attackers can exploit this issue to cause the application to enter an infinite loop...
Wireshark Multiple Dissector Denial of Service Vulnerabilities
No description provided by source. Source: http://www.securityfocus.com/bid/53651/info Wireshark is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to crash the affected application, denying service to legitimate users. Wireshark versions 1.6.0 through...
Wireshark CAPWAP Dissector - Denial of Service (msf)
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Udp include Msf::Auxiliary::Dos def initializeinfo =...
Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow (loop)
No description provided by source. $Id: wiresharklwresgetaddrbynameloop.rb 11126 2010-11-24 19:25:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
Wireshark 0.99.8 - X.509sat Dissector Unspecified DoS
No description provided by source. source: http://www.securityfocus.com/bid/28485/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to cause crashes and deny service to legitimate users of the application. Attackers may be able to...
Wireshark LDSS Dissector Buffer Overflow Vulnerability
No description provided by source. Source: http://www.securityfocus.com/bid/44987/info Wireshark is prone to a buffer-overflow vulnerability. Exploiting this issue may allow attackers to crash the application and deny service to legitimate users. Attackers may also execute arbitrary code in the...
Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit
No description provided by source. / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes: tested on Debian Sarge Linux...
Wireshark <= 1.4.4 , DECT Dissector Remote Buffer Overflow
No description provided by source...
Wireshark 1.2.1 - OpcUa Dissector Unspecified Resource Exhaustion DoS
No description provided by source. source: http://www.securityfocus.com/bid/36408/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to crash the application and deny service to legitimate users. These issues affect Wireshark 0.99.6...
Wireshark 1.2.1 - TLS Dissector 1.2 Conversation Handling Unspecified Remote DoS
No description provided by source. source: http://www.securityfocus.com/bid/36408/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to crash the application and deny service to legitimate users. These issues affect Wireshark 0.99.6...
DEBIAN-CVE-2014-4020
The dissectframe function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negative integer as a length value even though it was intended to represent an error condition, which allows remote attackers to cause a denial of service...
UBUNTU-CVE-2014-4020
The dissectframe function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negative integer as a length value even though it was intended to represent an error condition, which allows remote attackers to cause a denial of service...
openSUSE Security Update : wireshark (openSUSE-SU-2012:1035-1)
wireshark was updated to 1.4.15 - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The AFP dissector could go into a large loop. wnpa-sec-2012-17 CVE-2012-4289 - The RTPS2...
openSUSE Security Update : wireshark (openSUSE-SU-2011:0599-1)
This wireshark update fixes : - Use of un-initialized variables CVE-2011-1590 - Buffer overflow in DECT dissector CVE-2011-1591 - Crash in NFS dissector on Windows CVE-2011-1592 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...