CVE-2013-3556

The fragmentaddseqcommon function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3555

epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related to ciphers, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3561

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service loop or application crash via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector...

CVE-2013-3555

CVE-2013-3555 affects Wireshark 1.8.x in the GTPv2 dissector (epan/dissectors/packet-gtpv2.c). It is triggered by calling incorrect functions in certain contexts related to ciphers, allowing remote attackers to crash the application via a malformed packet (DoS). Affected version: Wireshark 1.8.x ...

CVE-2013-3562

Multiple integer signedness errors in the tvbunmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3561

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service loop or application crash via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector...

CVE-2013-3560

The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3555

epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related to ciphers, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3556

Wireshark is affected by CVE-2013-3556 in the ASN.1 BER dissector (fragment_add_seq_common in epan/reassemble.c). The issue is an incorrect pointer dereference during a comparison, allowing a remote attacker to crash the application via a malformed packet (denial of service). Public fixes are doc...

CVE-2013-3558

The dissectccpbsdcompopt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service application crash via a malformed packet...

PT-2013-4479

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.6 Description The issue is related to the use of incorrect integer data types in the DCP ETSI dissector, which can be exploited by remote attackers to cause a denial of service. This can be achieved by...

CVE-2013-3556: Improper Input Validation

The fragmentaddseqcommon function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service application crash via a malformed packet...

PT-2013-4476

Name of the Vulnerable Software and Affected Versions Wireshark versions prior to r48943 Description The issue is related to an incorrect pointer dereference during a comparison in the fragment add seq common function in the ASN.1 BER dissector. This allows remote attackers to cause a denial of...

PT-2013-4482

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.6 Description The issue is related to multiple integer signedness errors in the tvb unmasked function in the Websocket dissector. This can be exploited by remote attackers to cause a denial of service,...

PT-2013-4475

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.6 Description The issue is related to the GTPv2 dissector in Wireshark, where incorrect functions are called in certain contexts related to ciphers. This allows remote attackers to cause a denial of service...

PT-2013-4480

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.6 Description The issue is related to the dissect dsmcc un download function in the MPEG DSM-CC dissector, which uses an incorrect format string. This allows remote attackers to cause a denial of service,...

CVE-2013-3561: Undefined Security Weakness

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service loop or application crash via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector...

PT-2013-4478

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.6 Description The issue is related to the dissect ccp bsdcomp opt function in the PPP CCP dissector, which does not properly terminate a bit-field list. This allows remote attackers to cause a denial of...

CVE-2013-3560: Use of Externally-Controlled Format String

The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3555: Improper Input Validation

epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related to ciphers, which allows remote attackers to cause a denial of service application crash via a malformed packet...