CVE-2013-1583

CVE-2013-1583 affects the Wireshark DTN dissector (epan/dissectors/packet-dtn.c). The root cause is an inappropriate pointer access in dissect_version_4_primary_header that can be triggered by a malformed DTN packet, allowing a remote attacker to crash the application (denial of service). Public ...

CVE-2013-1587

The dissectrohcirpacket function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1574

The dissectbthcieiraddata function in epan/dissectors/packet-bthcicmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service infinite loop via a malform...

CVE-2013-1579

Wireshark contains a vulnerability CVE-2013-1579 in the RTPS dissector (epan/dissectors/packet-rtps.c) where malformed RTPS bitmap data can cause an infinite loop, leading to denial of service. Affected were Wireshark 1.6.x prior to 1.6.13 and 1.8.x prior to 1.8.5; exploitation would arise from p...

CVE-2013-1582

The dissectclnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service infinite loop or application crash via a malformed packet...

CVE-2013-1584

The CVE-2013-1584 issue affects Wireshark’s DTN dissector. The root cause is an inappropriate pointer access in dissect_version_5_and_6_primary_header within epan/dissectors/packet-dtn.c, exploitable via malformed DTN packets to cause a denial of service (application crash). It affects Wireshark ...

CVE-2013-1575

The dissectr3cmdalarmconfigure function in epan/dissectors/packet-assar3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1583

The dissectversion4primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1584

The dissectversion5and6primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1583

The dissectversion4primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1576

Wireshark CVE-2013-1576 affects the SDP dissector (epan/dissectors/packet-sdp.c): malformed crypto-suite parameters can trigger an infinite loop, risking denial of service. Affected versions are Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5. Remediation is to upgrade to at least Wireshark ...

CVE-2013-1574

CVE-2013-1574 affects Wireshark’s Bluetooth HCI dissector. The vulnerable code path is in epan/dissectors/packet-bthci_cmd.c where an incorrect data type for a counter creates an infinite loop when processing malformed Bluetooth HCI packets, enabling a denial-of-service condition. Affected produc...

CVE-2013-1573

Wireshark vulnerability CVE-2013-1573 affects the CSN.1 dissector (epan/dissectors/packet-csn1.c). The csnStreamDissector fails to properly handle a large number of padding bits, enabling remote attackers to cause a denial of service via an infinite loop when processing a malformed packet. Affect...

CVE-2013-1586

CVE-2013-1586 affects Wireshark DTLS dissector: the fragment_set_tot_len logic in epan/reassemble.c fails to correctly determine the length of a reassembled packet, enabling a remote attacker to crash the application (DoS). Affected products/versions include Wireshark 1.6.x before 1.6.13 and 1.8....

CVE-2013-1575

CVE-2013-1575 affects the Wireshark R3 dissector (epan/dissectors/packet-assa_r3.c). Versions impacted: Wireshark 1.6.x prior to 1.6.13 and 1.8.x prior to 1.8.5. Root cause: the R3 dissector fails to handle a certain alarm length in the packet, which can cause a denial of service via an infinite ...

CVE-2013-1576

The dissectsdpmediaattribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1581

The dissectpftfecdetailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service loop via a malformed packet...

CVE-2013-1588

Multiple buffer overflows in the dissectpftfecdetailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1573

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1583

The dissectversion4primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...