CVE-2007-6111

Summary: CVE-2007-6111 pertains to multiple vulnerabilities in Wireshark (Eth­er­eal) with remote DoS possibilities. Related connected advisories indicate several CVEs (e.g., 2007-6111, 2007-6112, 2007-6113, 2007-6114, 2007-6115, 2007-6116, 2007-6117, 2007-6118, 2007-6119, 2007-6120, 2007-6121, 2...

CVE-2007-6114

CVE-2007-6114 affects Wireshark (formerly Ethereal) versions 0.99.0–0.99.6, with two vulnerable components: the SSL dissector and the iSeries (OS/400) Communication trace file parser. The issue is described as multiple buffer overflows that could be triggered by specially crafted network packets ...

CVE-2007-6113

CVE-2007-6113 is a vulnerability in Wireshark's DNP3 dissector where an integer signedness error in the 0.10.12–0.99.6 range can cause a denial of service (long loop) by processing a malformed DNP3 packet. Connected advisories confirm the issue was fixed by upgrading to Wireshark 0.99.7 (and late...

CVE-2007-6116

CVE-2007-6116 : The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 is susceptible to remote denial of service (infinite loop or crash) via unknown vectors. The provided documents do not specify the exact exploit vectors or a remediation version. Monitor for official fixes an...

CVE-2007-6120

CVE-2007-6120 affects Wireshark (formerly Ethereal) Bluetooth SDP dissector, enabling remote denial of service via infinite loop in versions 0.99.2–0.99.6. Connected advisories confirm the vulnerability in the Bluetooth SDP parser and related DoS concerns; upgrade to Wireshark 0.99.7 (or later) t...

CVE-2007-6117

Wireshark (formerly Ethereal) HTTP dissector vulnerability CVE-2007-6117 affects Wireshark versions 0.10.14 through 0.99.6. The issue allows remote attackers to crash the dissector and potentially execute arbitrary code via crafted chunked messages. Connected advisories confirm affected product i...

CVE-2007-6112

Wireshark 0.99.6 is affected by CVE-2007-6112 (buffer overflow in the PPP dissector) that could be triggered remotely to crash the application and potentially execute arbitrary code. Public advisories (e.g., RHSA-2008:0058, CESA-2008:0058, and related NASL summaries) indicate fixes in subsequent ...

CVE-2007-6118

Wireshark’s MEGACO dissector (CVE-2007-6118) is vulnerable to resource exhaustion through crafted network packets, causing a long loop and denial of service. Reports across multiple advisories indicate the MEGACO dissector could loop or consume excessive resources when parsing certain input. The ...

CVE-2007-6121

Wireshark (formerly Ethereal) versions 0.8.16 through 0.99.6 are affected by CVE-2007-6121 due to a malformed RPC Portmap packet that could crash the process (denial of service). Severity is shown as MEDIUM with network vector and no authentication required in the CVE entry; the impact is a crash...

CVE-2007-6115

CVE-2007-6115 describes a buffer overflow in Wireshark’s ANSI MAP dissector affecting 0.99.5–0.99.6 on unspecified platforms. This flaw can be triggered by malformed input packets, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. Public advisories ref...

openSUSE 10 Security Update : ethereal (ethereal-2029)

A security problem was fixed in ethereal, which could be used by remote attackers to hang the ethereal process. CVE-2006-4333: If the SSCOP dissector has a port range configured AND the SSCOP payload protocol is Q.2931, a malformed packet could make the Q.2931 dissector use up available memory. N...

openSUSE 10 Security Update : ethereal (ethereal-1932)

This update fixes several security related bugs ranging from crashes to arbitrary code execution. CVE-2006-3627, CVE-2006-3628, CVE-2006-3629, CVE-2006-3630, CVE-2006-3631, CVE-2006-3632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

openSUSE 10 Security Update : ethereal (ethereal-2246)

Various problems have been fixed in the network analyzer Ethereal, most leading to crashes of the ethereal program. CVE-2006-5740: A unspecified vulnerability in the LDAP dissector could be used to crash Ethereal. CVE-2006-4574: A single \0 byte heap overflow was fixed in the MIME multipart...

FreeBSD : wireshark -- Multiple problems (7fadc049-2ba0-11dc-9377-0016179b2dd5)

wireshark Team reports : It may be possible to make Wireshark or Ethereal crash or use up available memory by injecting a purposefully malformed packet onto the wire or by convincing someone to read a malformed packet trace file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

wireshark -- Multiple problems

wireshark Team reports: It may be possible to make Wireshark or Ethereal crash or use up available memory by injecting a purposefully malformed packet onto the wire or by convincing someone to read a malformed packet trace file...

Debian DSA-1322-1 : wireshark - several vulnerabilities

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3390 Off-by-one overflows were discovered in the iSeries dissector. -...

SUSE-SA:2006:065: ethereal

The remote host is missing the patch for the advisory SUSE-SA:2006:065 ethereal. Various problems have been fixed in the network analyzer Ethereal now called Wireshark, most of them leading to crashes of the ethereal program. CVE-2006-5740: An unspecified vulnerability in the LDAP dissector could...

CVE-2007-0459

CVE-2007-0459 affects Wireshark (Ethreal) TCP dissector. The description specifies a vulnerability in the TCP dissector allowing a remote attacker to cause a denial of service (application crash or hang) by sending fragmented HTTP packets, impacting Wireshark versions 0.99.2 through 0.99.4. Conne...

CVE-2007-0458

CVE-2007-0458 affects Wireshark (formerly Ethereal) in versions 0.99.3 and 0.99.4. The vulnerability is in the HTTP dissector and can cause the application to crash (remote denial of service) via unspecified vectors. This is documented across multiple disclosures and advisories associated with Wi...

CVE-2007-0456

CVE-2007-0456 affects Wireshark (formerly Ethereal) 0.99.3 and 0.99.4, where the LLT dissector could crash the application, enabling remote denial of service via unspecified vectors. Open advisories indicate related fixes in Wireshark 0.99.5 (and later), suggesting upgrading to a version in which...