Lucene search
+L

138 matches found

UbuntuCve
UbuntuCve
added 2016/01/04 5:59 a.m.28 views

CVE-2015-8742

The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

5.5CVSS6.5AI score0.01407EPSS
Exploits0References4
OSV
OSV
added 2016/01/04 5:59 a.m.2 views

UBUNTU-CVE-2015-8742

The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

5.5CVSS6.4AI score0.01407EPSS
Exploits0References5
CVE
CVE
added 2016/01/04 2:0 a.m.62 views

CVE-2015-8742

CVE-2015-8742 affects the Wireshark 2.0.x series, specifically the MS-WSP dissector. The vulnerability is in dissect_CPMSetBindings in epan/dissectors/packet-mswsp.c, where the code does not validate the column size. This can be exploited by sending a crafted packet to trigger a denial of service...

5.5CVSS5.3AI score0.01407EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2016/01/04 2:0 a.m.36 views

CVE-2015-8742

The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

5.4AI score0.01407EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2016/01/04 2:0 a.m.41 views

CVE-2015-8742

The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

5.5CVSS5.5AI score0.01407EPSS
Exploits0
CNVD
CNVD
added 2016/01/04 12:0 a.m.6 views

Wireshark MS-WSP Parser Denial of Service Vulnerability

Wireshark is a suite of network packet analysis software. A denial of service vulnerability exists in the Wireshark MS-WSP parser. Because the dissectCPMSetBindings function in the epan/dissectors/packet-mswsp.c file does not validate the size of the columns, it allows remote attackers to cause a...

5.5CVSS7.5AI score0.01407EPSS
Exploits0References1
CVE
CVE
added 2014/01/22 2:0 a.m.55 views

CVE-2014-0669

Cisco ASR 5000 Series Gateway GPRS Support Node (GGSN) vulnerability: the Wireless Session Protocol (WSP) mis-processes certain WSP packets, allowing an unauthenticated, remote attacker to bypass Top‑Up payment restrictions (browse without charging). Root cause: incorrect handling of WSP packets....

5CVSS7AI score0.01832EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2014/01/22 2:0 a.m.21 views

CVE-2014-0669

The Wireless Session Protocol WSP feature in the Gateway GPRS Support Node GGSN component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371...

6.8AI score0.01832EPSS
Exploits0References7
NVD
NVD
added 2005/10/27 10:2 a.m.23 views

CVE-2005-3249

Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer...

6.4CVSS6.4AI score0.02694EPSS
Exploits0References15
UbuntuCve
UbuntuCve
added 2005/10/27 10:2 a.m.27 views

CVE-2005-3249

Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer...

6.4CVSS6AI score0.02694EPSS
Exploits0References1
CVE
CVE
added 2005/10/27 4:0 a.m.66 views

CVE-2005-3249

CVE-2005-3249 affects Ethereal up to version 0.10.12 (vulnerability in the WSP dissector). The root cause described in connected MDKSA-2005:193-2 is that the WSP dissector could free an invalid pointer, enabling a remote attacker to cause a denial of service or memory corruption. A patched versio...

6.4CVSS6.3AI score0.02694EPSS
Exploits0References15Affected Software1
Cvelist
Cvelist
added 2005/10/27 4:0 a.m.27 views

CVE-2005-3249

Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer...

6.3AI score0.02694EPSS
Exploits0References15
RedHat Linux
RedHat Linux
added 2005/10/25 4:42 p.m.7 views

security flaw

Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer...

6.4CVSS5.8AI score0.02694EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2005/10/24 12:0 a.m.42 views

Fedora Core 4 : ethereal-0.10.13-1.FC4.2 (2005-1011)

Ethereal 0.10.13 fixes the following issues : The ISAKMP dissector could exhaust system memory. CVE-2005-3241 Fixed in: r15163 Bug IDs: none Versions affected: 0.10.11 to 0.10.12. The FC-FCS dissector could exhaust system memory. CVE-2005-3241 Fixed in: r15204 Bug IDs: 312 Versions affected: 0.9....

10CVSS5.8AI score0.10826EPSS
Exploits0References1
CVE
CVE
added 2005/05/05 4:0 a.m.55 views

CVE-2005-1468

CVE-2005-1468 affects Ethereal (before 0.10.11) where multiple dissectors (including WSP, Q.931, H.245, KINK, MGCP, RPC, SMBMailslot, SMB NETLOGON, and others) may crash the analyzer via crafted network traffic, causing a denial of service due to a null dereference. Multiple advisories (RHSA-2005...

5CVSS6.5AI score0.01994EPSS
Exploits1References7Affected Software1
CVE
CVE
added 2005/05/05 4:0 a.m.58 views

CVE-2005-1459

Ethereal (now Wireshark) has multiple remote‑code-execution/denial of service vulnerabilities in its dissectors (WSP, BER, SMB, NDPS, IAX2, RADIUS, TCAP, MRDISC, 802.3 Slow, SMBMailslot, SMB PIPE) prior to version 0.10.11. The CVE set CVE-2005-1456 through CVE-2005-1470 is cited for these issues....

5CVSS6.5AI score0.01898EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2003/06/18 4:0 a.m.37 views

CVE-2003-0432

Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...

9.4AI score0.02261EPSS
Exploits0References7
CVE
CVE
added 2003/06/18 4:0 a.m.57 views

CVE-2003-0432

Ethereal (WinZip packet analyzer) 0.9.12 and earlier is affected by multiple string-handling weaknesses in several dissectors (BGP, WTP, DNS, 802.11, ISAKMP, WSP, CLNP, ISIS, RMI). The CVE-2003-0432 issue arises from improper handling of certain strings, contributing to potential memory consumpti...

10CVSS9.4AI score0.02261EPSS
Exploits0References7Affected Software1
Rows per page
Query Builder