CVE-2013-2476: Undefined Security Weakness

The dissecthartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via a packet with a header that is too short...

PT-2013-3819

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.0 through 1.8.5 Description The issue is related to the dissect diagnosticrequest function in the REsource LOcation And Discovery RELOAD dissector, which uses an incorrect integer data type. This allows remote attackers ...

PT-2013-3820

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.5 Description The issue is related to the REsource LOcation And Discovery aka RELOAD dissector in Wireshark, where incorrect integer data types are used. This allows remote attackers to cause a denial of...

CVE-2013-2483: Undefined Security Weakness

The acnadddmpdata function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service divide-by-zero error and application crash via an invalid count value in ACNDMPADTDRE DMP data...

CVE-2013-2488: Improper Input Validation

The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service application crash via a large offset value that triggers write access to an...

PT-2013-3811

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue arises from the dissect server info function in the MS-MMS dissector, which does not properly manage string lengths. This allows remote...

PT-2013-3814

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue is related to an integer signedness error in the dissect mount dirpath call function in the Mount dissector. When nfs file name snooping is...

PT-2013-3815

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via a malformed packet. This is due to a problem in the...

PT-2013-3817

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a malformed packet. This is due to a problem in t...

PT-2013-3821

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue concerns the DTLS dissector in Wireshark, which fails to validate the fragment offset before invoking the reassembly state machine. This allow...

PT-2013-3808

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by sending a malformed packet. This is due to a problem in the TCP dissector. Recommendations...

PT-2013-3809

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by sending a packet with a header that is too short. This is related to the dissect hartip functi...

PT-2013-3810

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.5 Description The issue exists in the CSN.1 dissector due to incorrect handling of function pointers. This allows remote attackers to cause a denial of service, resulting in an application crash, via a...

PT-2013-3812

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by providing invalid Sub-tlv data to the dissect mpls echo tlv dd map function in the MPLS Echo...

PT-2013-3816

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via an invalid count value in...

PT-2013-3818

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via a malformed packet. This is due to a problem in the...

CVE-2013-2478: Undefined Security Weakness

The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...

CVE-2013-2484: Undefined Security Weakness

The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-2486: Undefined Security Weakness

The dissectdiagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery aka RELOAD dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service infinite loop via crafted integer...

SuSE 11.2 Security Update : wireshark (SAT Patch Number 7317)

wireshark was updated to 1.8.5 bnc801131, fixing bugs and security issues : The following vulnerabilities have been fixed : - Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01...