UBUNTU-CVE-2013-4076

Buffer overflow in the dissectiphccrtpfh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2013-4074

The dissectcapwapdata function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service application crash via a...

CVE-2013-4083

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service application crash via a crafted...

UBUNTU-CVE-2013-4083

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service application crash via a crafted...

CVE-2013-4074

CVE-2013-4074 affects Wireshark CAPWAP dissector: CAPWAP data handling in epan/dissectors/packet-capwap.c treats -1 as an error value, enabling remote crafted packets to crash the application. Affected are Wireshark 1.6.x prior to 1.6.16 and 1.8.x prior to 1.8.8. Remediation: upgrade to the fixed...

CVE-2013-4077

Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service application crash via a crafted packet, related to nbap.cnf and packet-nbap.c...

CVE-2013-4081

The httppayloadsubdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause a denial of service stack consumption via a...

CVE-2013-4076

Buffer overflow in the dissectiphccrtpfh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4078

epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4081

CVE-2013-4081 affects Wireshark 1.6.x (before 1.6.16) and 1.8.x (before 1.8.8). The http_payload_subdissector in Wireshark’s HTTP dissector may recurse incorrectly, enabling a remote attacker to cause a denial of service through crafted traffic that consumes stack space. Remediation per the sourc...

CVE-2013-4081

The httppayloadsubdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause a denial of service stack consumption via a...

CVE-2013-4076

Wireshark 1.8.x before 1.8.8 has a buffer overflow in the PPP dissector (dissect_iphc_crtp_fh in epan/dissectors/packet-ppp.c) that can be triggered by a crafted packet, causing the application to crash (DoS). The vulnerability affects the PPP dissector in Wireshark 1.8.x era; exploitation would ...

CVE-2013-4077

CVE-2013-4077 affects the NBAP dissector in Wireshark 1.8.x before 1.8.8. The issue is an array index error in NBAP processing (nbap.cnf and packet-nbap.c) that can cause a denial of service (application crash) via a crafted packet. Documents validate the root cause and version bound; no exploit ...

CVE-2013-4077

Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service application crash via a crafted packet, related to nbap.cnf and packet-nbap.c...

MGASA-2013-0165 Updated wireshark packages fix security vulnerability (Mageia 2)

The ASN.1 BER dissector could crash CVE-2013-3557...

MGASA-2013-0168 Updated wireshark packages fix security vulnerabilities (Mageia 3)

The RELOAD dissector could go into an infinite loop CVE-2013-2486, CVE-2013-2487. The GTPv2 dissector could crash CVE-2013-3555. The ASN.1 BER dissector could crash CVE-2013-3557. The PPP CCP dissector could crash CVE-2013-3558. The DCP ETSI dissector could crash CVE-2013-3559. The MPEG DSM-CC...

Updated wireshark packages fix security vulnerability (Mageia 2)

The ASN.1 BER dissector could crash CVE-2013-3557...

Wireshark Multiple Vulnerabilities (Jun 2013) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Wireshark DCP ETSI Dissector DoS Vulnerability (Jun 2013) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark Multiple Dissector Multiple Vulnerabilities - May 13 (Mac OS X)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnmay13macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Wireshark Multiple Dissector Multiple Vulnerabilities - May 13 Mac OS X Authors: Arun Kallavi Copyright: Copyright...