Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.9 advisory. - Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service application crash via a...

Design/Logic Flaw

The prototreeadditem function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service infinite loop via vectors involving a malformed IKE packet and many items in a tree...

CVE-2011-3266

Wireshark vulnerability CVE-2011-3266 affects the IKEv1 dissector: the proto_tree_add_item handling can be exploited by a malformed IKE packet with many items to trigger a denial of service (infinite loop). Affected versions per connected sources: Wireshark 1.6.0–1.6.1 and 1.4.0–1.4.8. Root cause...

DEBIAN-CVE-2011-2698

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

CVE-2011-2698

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

Code injection

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

CVE-2011-2698

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

PT-2011-4032

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.7 Wireshark versions 1.6.x through 1.6.0 Description The issue is caused by an off-by-one error in the elem cell id aux function in the ANSI MAP dissector. This error allows remote attackers to cause a deni...

PT-2011-4356

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.0 through 1.4.8 Wireshark versions 1.6.0 through 1.6.1 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, when the IKEv1 protocol dissector is used in Wireshark. Th...

Fedora 14 : wireshark-1.4.8-1.fc14 (2011-9640)

Wireshark 1.4.8 fixes the following vulnerabilities : The Lucent/Ascend file parser was susceptible to an infinite loop. CVE-2011-2597. The ANSI MAP dissector was susceptible to an infinite loop. CVE-2011-2698. Note that Tenable Network Security has extracted the preceding description block...

Wireshark 1.6.1 Malformed IKE Packet Denial of Service

Wireshark 1.6.1 Malformed IKE Packet Denial of Service ------------------------------------------------------------------ I. Summary A flaw has been identified in Wireshark 1.6.1 concerning IKEv1 protocol dissector and the function prototreeadditem ,when add more than 1000000 items to a...

Wireshark 1.6.1 Malformed IKE Packet Denial of Service

No description provided by source. Wireshark 1.6.1 Malformed IKE Packet Denial of Service ------------------------------------------------------------------ I. Summary A flaw has been identified in Wireshark 1.6.1 concerning IKEv1 protocol dissector and \ the function prototreeadditem ,when add...

DEBIAN-CVE-2011-1957

The dissectdcmmain function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service infinite loop via an invalid PDU length...

CVE-2011-1957

The dissectdcmmain function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service infinite loop via an invalid PDU length...

CVE-2011-1957

The dissectdcmmain function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service infinite loop via an invalid PDU length...

CVE-2011-1957

CVE-2011-1957 affects Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7; the DICOM dissector’s dissect_dcm_main (epan/dissectors/packet-dcm.c) can loop infinitely on an invalid PDU length, enabling remote denial of service. The MiracleLinux/OpenVAS advisories confirm this vulnerability and ref...

CVE-2011-1957

The dissectdcmmain function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service infinite loop via an invalid PDU length...

PT-2011-3499

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.x through 1.2.16 Wireshark versions 1.4.x through 1.4.6 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via an invalid PDU length. This is related to the dissect...

Mandriva Linux Security Advisory : wireshark (MDVSA-2011:105)

This advisory updates wireshark to the latest version 1.2.17, fixing several security issues : - Large/infinite loop in the DICOM dissector. Bug 5876 Versions affected: 1.2.0 to 1.2.16 and 1.4.0 to 1.4.6. - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that a corrupted...

Wireshark < 1.2.17 / 1.4.7 Multiple DoS Vulnerabilities

The installed version of Wireshark is 1.2.x less than 1.2.17 or 1.4.x less than 1.4.7. As such, it is affected by the following vulnerabilities : - An error exists in DICOM dissector that can allow denial of service attacks when processing certain malformed packets. Issue 5876 - An error exists i...