DSA-1446-1 wireshark denial of service

Bulletin has no description...

Wireshark: Multiple vulnerabilities

Background Wireshark is a network protocol analyzer with a graphical front-end. Description Multiple buffer overflows and infinite loops were discovered in multiple dissector and parser components, including those for MP3 and NCP CVE-2007-6111, PPP CVE-2007-6112, DNP CVE-2007-6113, SSL and iSerie...

FreeBSD : wireshark -- multiple vulnerabilities (8a835235-ae84-11dc-a5f9-001a4d49522b)

The Wireshark team reports of multiple vulnerabilities : - Wireshark could crash when reading an MP3 file. - Beyond Security discovered that Wireshark could loop excessively while reading a malformed DNP packet. - Stefan Esser discovered a buffer overflow in the SSL dissector. - The ANSI MAP...

CVE-2007-6439

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

Design/Logic Flaw

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6438

Unspecified vulnerability in the SMB dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111...

DEBIAN-CVE-2007-6439

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

DEBIAN-CVE-2007-6451

Unspecified vulnerability in the CIP dissector in Wireshark formerly Ethereal 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors that trigger allocation of large amounts of memory...

CVE-2007-6438

Unspecified vulnerability in the SMB dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111...

CVE-2007-6441

The WiMAX dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors related to "unaligned access on some platforms."...

CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

DEBIAN-CVE-2007-6441

The WiMAX dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors related to "unaligned access on some platforms."...

CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

DEBIAN-CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6439

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

Code injection

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

CVE-2007-6441

The WiMAX dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors related to "unaligned access on some platforms."...

CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6450

The CVE-2007-6450 issue affects Wireshark (Ethereal) 0.9.8–0.99.6, where the RPL dissector can be abused by remote attackers to trigger an infinite loop, causing a denial of service. Several Nessus/CentOS/Oracle/MiracleLinux advisories confirm this vulnerability and reference Wireshark 0.99.7 as ...