145 matches found
CVE-2010-2992
packet-gsmarr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service crash via unknown vectors that trigger a NULL pointer dereference...
DEBIAN-CVE-2010-2992
packet-gsmarr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service crash via unknown vectors that trigger a NULL pointer dereference...
CVE-2010-2992
packet-gsmarr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service crash via unknown vectors that trigger a NULL pointer dereference...
CVE-2010-2992
CVE-2010-2992 affects Wireshark’s GSM A RR dissector. The vulnerability exists in the GSM A RR parser (packet-gsm_a_rr.c) due to a NULL pointer dereference, allowing a remote attacker to cause a crash (denial of service) when processing crafted packets. The scope in the initial description covers...
CVE-2010-2992: Undefined Security Weakness
packet-gsmarr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service crash via unknown vectors that trigger a NULL pointer dereference...
Wireshark / Ethereal < 1.0.15 / 1.2.10 Multiple Vulnerabilities
The installed version of Wireshark or Ethereal is potentially affected by multiple vulnerabilities. - The SigComp Universal Decompressor Virtual Machine could potentially overflow a buffer. Bug 4867 - The ANS.1 BER dissector could potentially exhaust the stack memory. Bug 4984 - The GSM A RR...
GLSA-200911-05 : Wireshark: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200911-05 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark: Ryan Giobbi reported an integer overflow in wiretap/erf.c CVE-2009-3829. The vendor reported multiple unspecified...
Wireshark Multiple Denial of Service Vulnerabilities (Windows)
This host is installed with Wireshark and is prone to multiple Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwiresharkmultdosvulnwin.nasl 5148 2017-01-31 13:16:55Z teissa $ Wireshark Multiple Denial of Service Vulnerabilities Windows Authors: Antu Sanadi Copyright:...
Wireshark Multiple Denial of Service Vulnerabilities - Windows
Wireshark is prone to multiple Denial of Service vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Design/Logic Flaw
Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure...
CVE-2009-3242
Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure...
CVE-2009-3242
CVE-2009-3242 affects Wireshark, specifically the GSM A RR dissector in version 1.2.0 and 1.2.1. The issue is described as an uninitialized dissector handle in packet.c that triggers an assertion failure, leading to an application crash (DoS). Connected sources (e.g., GLSA 200911-05 and Fedora ad...
CVE-2009-3242: Undefined Security Weakness
Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure...
Wireshark 1.2.1 - GSM A RR Dissector packet.c Remote Denial of Service
source: https://www.securityfocus.com/bid/36408/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to crash the application and deny service to legitimate users. These issues affect Wireshark 0.99.6 through 1.2.1...
[SECURITY] [DSA 1795-1] New ldns packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1795 [email protected] http://www.debian.org/security/ Devin Carraway May 07, 2009 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
CVE-2007-6421: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in balancer-manager in modproxybalancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the 1 ss, 2 wr, or 3 rr parameters, or 4 the URL...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
CVE-2007-6341
CVE-2007-6341 affects Net::DNS (Net::DNS perl module) in version 0.60 build 654, used by SpamAssassin and OTRS. A crafted DNS response can cause a remote DoS (process crash croak). Public references show Debian/Ubuntu patches and advisories updating libnet-dns-perl to fixed releases (e.g., DSA-15...
CVE-2007-6341: Improper Restriction of Operations within the Bounds of a Memory Buffer
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
Perl Net::DNS DNS应答远程拒绝服务漏洞
BUGTRAQ ID: 26902 CVE ID:CVE-2007-6341 Perl Net::DNS是一款使用Perl实现的DNS解析应用程序。 Perl Net::DNS不正确处理畸形应答请求,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于Net/DNS/RR/A.pm: if $self-"rdlength" 0 $self-"address" = inetntoasubstr$$data, $offset, 4; 由于在使用substr时不正确验证$$data有4字节可读,可导致数据发送给inetntoa不足够而导致触发如下代码: ipaddress =...