EUVD-2018-9964

Malware in sbrugna...

SUSE CVE-2017-6471

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length...

SUSE CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

DEBIAN-CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

UBUNTU-CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

CVE-2018-18227

CVE-2018-18227 affects Wireshark where the MS-WSP protocol dissector could crash. Affected ranges are Wireshark 2.6.0–2.6.3 and 2.4.0–2.4.9. Root cause: NULL return values not handled in epan/dissectors/packet-mswsp.c; remediation is upstream patch to properly handle NULLs. In practice, the vulne...

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

CVE-2018-18227: NULL Pointer Dereference

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

PT-2018-2641

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.9 Wireshark versions 2.6.0 through 2.6.3 Description The issue is related to a NULL pointer dereference in the Wireshark program, which can cause a crash. This can be exploited by a remote attacker to cause...

DEBIAN-CVE-2016-6512

epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvbgetguintvar function, which allows remote attackers to cause a denial of service infinite loop via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors...