UBUNTU-CVE-2013-2478

The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...

CVE-2013-2485

The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-2483

The acnadddmpdata function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service divide-by-zero error and application crash via an invalid count value in ACNDMPADTDRE DMP data...

CVE-2013-2476

CVE-2013-2476 affects Wireshark 1.8.x prior to 1.8.6, in the HART/IP dissector (epan/dissectors/packet-hartip.c). The vulnerability arises in dissect_hartip where a packet header that is too short can cause an infinite loop, leading to a denial of service. The impact is a potentially unbounded CP...

CVE-2013-2488

The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service application crash via a large offset value that triggers write access to an...

CVE-2013-2475

CVE-2013-2475 affects Wireshark 1.8.x before 1.8.6. The TCP dissector can crash the application when processing a malformed TCP packet, enabling a remote attacker to induce a denial of service. The vulnerability is limited to the TCP dissector in the affected Wireshark version line; other dissect...

CVE-2013-2478

CVE-2013-2478 concerns the MS-MMS dissector in Wireshark, where epan/dissectors/packet-ms-mms.c mishandles string lengths, allowing a remote attacker to crash the application (denial of service) via a malformed packet that overflows an integer or contains embedded NULLs. The issue affects Wiresha...

CVE-2013-2477

Wireshark 1.8.x before 1.8.6 is affected by CVE-2013-2477 due to a flaw in the CSN.1 dissector that mishandles function pointers, allowing remote attackers to crash the application via a malformed packet. The issue is specific to the CSN.1 dissector in the 1.8.x line; other dissectors are not imp...

CVE-2013-2483

CVE-2013-2483 affects the ACN dissector in Wireshark (epan/dissectors/packet-acn.c). The issue occurs when processing ACN_DMP_ADT_D_RE DMP data with an invalid count value, leading to a divide-by-zero error that can cause a denial of service (application crash). Connected advisories confirm the r...

CVE-2013-2482

CVE-2013-2482 affects Wireshark: the AMPQ dissector can enter an infinite loop via a malformed packet, leading to denial of service. Impacted are Wireshark 1.6.x prior to 1.6.14 and 1.8.x prior to 1.8.6. The issue is triggered by crafted AMPQ traffic, resulting in a potentially unresponsive proce...

CVE-2013-2481

Integer signedness error in the dissectmountdirpathcall function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfsfilenamesnooping is enabled, allows remote attackers to cause a denial of service application crash via a...

CVE-2013-2477

The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-2478

The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...

CVE-2013-2484

The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-2488

The CVE-2013-2488 issue affects the DTLS dissector in Wireshark, with versions 1.6.x before 1.6.14 and 1.8.x before 1.8.6 lacking validation of the fragment offset prior to the reassembly state machine. This can cause a denial of service (application crash) due to writes to invalid memory when a ...

CVE-2013-2481

Integer signedness error in the dissectmountdirpathcall function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfsfilenamesnooping is enabled, allows remote attackers to cause a denial of service application crash via a...

CVE-2013-2487

epan/dissectors/packet-reload.c in the REsource LOcation And Discovery aka RELOAD dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer data types, which allows remote attackers to cause a denial of service infinite loop via crafted integer values in a packet, related to the 1...

CVE-2013-2484

The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-2482

The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-2481

Wireshark Mount dissector vulnerability CVE-2013-2481: in epan/dissectors/packet-mount.c, a signed integer length negative value (when nfs_file_name_snooping is enabled) can crash the application, affecting Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6. The issue is fixed in Wireshark rele...