CVE-2016-6508

epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service large loop via a crafted packet...

CVE-2016-6510

CVE-2016-6510 : Off-by-one error in Wireshark’s RLC dissector (epan/dissectors/packet-rlc.c) allows remote crash/DoS via a crafted packet. Affected: Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5. Public advisories confirm DoS potential; Debian/Mageia updates fix this in newer packages. Rem...

Wireshark 2.0.0 < 2.0.4 / 1.12.0 < 1.12.12 - RLC Dissector Denial of Service

Exploit for multiple platform in category dos / poc Sample PCAP Build Information: TShark Wireshark 2.0.2 SVN Rev Unknown from unknown Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions. There ...

Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - RLC Dissector Denial of Service

Sample PCAP Build Information: TShark Wireshark 2.0.2 SVN Rev Unknown from unknown Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or...

Wireshark 1.12.0 1.12.12 2.0.0 2.0.4 - RLC Dissector Denial of Service

Wireshark 1.12.0 1.12.12 2.0.0 2.0.4 - RLC Dissector Denial of Service Sample PCAP Build Information: TShark Wireshark 2.0.2 SVN Rev Unknown from unknown Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying...

CVE-2016-6508

epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service large loop via a crafted packet...

CVE-2016-6510

Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2015:1713-1)

Wireshark has been updated to 1.12.7. FATE319388 The following vulnerabilities have been fixed : - Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241 - Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242 - Wireshark could cras...

[SECURITY] [DSA 3367-1] wireshark security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3367-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 24, 2015 https://www.debian.org/security/faq -...

SUSE SLES11 Security Update : wireshark (SUSE-SU-2015:1676-1)

Wireshark has been updated to 1.12.7. FATE319388 The following vulnerabilities have been fixed : - Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241 - Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242 - Wireshark could cras...

SUSE SLED11 Security Update : wireshark (SUSE-SU-2015:1676-2)

Wireshark has been updated to 1.12.7. FATE319388 The following vulnerabilities have been fixed : - Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241 - Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242 - Wireshark could cras...

[SECURITY] [DSA 3367-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3367-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 24, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3367-1 (wireshark - security update)

Multiple vulnerabilities were discovered in the dissectors/parsers for ZigBee, GSM RLC/MAC, WaveAgent, ptvcursor, OpenFlow, WCCP and in internal functions which could result in denial of service. OpenVAS Vulnerability Test $Id: deb3367.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from...

DSA-3367-1 wireshark - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3367-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : wireshark -- multiple vulnerabilities (9bdd8eb5-564a-11e5-9ad8-14dae9d210b8)

Wireshark development team reports : The following vulnerabilities have been fixed. - wnpa-sec-2015-21 Protocol tree crash. Bug 11309 - wnpa-sec-2015-22 Memory manager crash. Bug 11373 - wnpa-sec-2015-23 Dissector table crash. Bug 11381 - wnpa-sec-2015-24 ZigBee crash. Bug 11389 - wnpa-sec-2015-2...

Wireshark GSM RLC/MAC Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability exists in the epan/dissectors/packet-gsmrlcmac.c file in the GSM RLC/MAC parser in Wireshark versions 1.12.7 prior to 1.12.x. This vulnerability can be...

openSUSE Security Update : wireshark (openSUSE-2015-554)

Wireshark was updated to fix several security vulnerabilities and bugs. - Wireshark 1.12.7 boo941500 The following vulnerabilities have been fixed : - Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 - Wireshark could attempt to free invalid memory. wnpa-sec-2015-2...

CVE-2015-6245

epan/dissectors/packet-gsmrlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2015-6245

epan/dissectors/packet-gsmrlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...