CVE-2021-22207

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file...

CVE-2021-22207

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file...

CVE-2021-22207

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file...

PT-2021-14915

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.2.0 through 3.2.12 Wireshark versions 3.4.0 through 3.4.4 Description: The issue is related to excessive memory consumption in the MS-WSP dissector, which can lead to denial of service. This can be achieved via packet...

CVE-2021-22207: Allocation of Resources Without Limits or Throttling

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file...

Wireshark SQL injection vulnerability

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A memory consumption vulnerabilit...

Wireshark 3.4.x < 3.4.5 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.4.5. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.5 advisory. - Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service...

Wireshark 2.6.x < 2.6.4 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.6.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.4 advisory. - In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2018:3282-1)

This update for wireshark fixes the following issues : Wireshark was updated to 2.4.10 bsc1111647. Following security issues were fixed : CVE-2018-18227: MS-WSP dissector crash wnpa-sec-2018-47 CVE-2018-12086: OpcUA dissector crash wnpa-sec-2018-50 Further bug fixes and updated protocol support...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:3590-1)

This update for wireshark fixes the following issues : Wireshark was updated to 2.4.10 bsc1111647. Following security issues were fixed : CVE-2018-18227: MS-WSP dissector crash wnpa-sec-2018-47 CVE-2018-12086: OpcUA dissector crash wnpa-sec-2018-50 Further bug fixes and updated protocol support...

Wireshark MS-WSP Dissector Denial of Service Vulnerability (wnpa-sec-2018-47) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

DEBIAN-CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

UBUNTU-CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

Input validation

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

CVE-2018-18227

CVE-2018-18227 affects Wireshark where the MS-WSP protocol dissector could crash. Affected ranges are Wireshark 2.6.0–2.6.3 and 2.4.0–2.4.9. Root cause: NULL return values not handled in epan/dissectors/packet-mswsp.c; remediation is upstream patch to properly handle NULLs. In practice, the vulne...