5 matches found
CVE-2013-5717: Improper Input Validation
The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service application crash via a crafted packet that is not properly handled by the wmemblockalloc function in...
Wireshark: Multiple vulnerabilities
Background Wireshark is a versatile network protocol analyzer. Description Multiple vulnerabilities have been discovered in Wireshark: David Maciejak discovered a vulnerability in packet-usb.c in the USB dissector via a malformed USB Request Block URB CVE-2008-4680. Florent Drouin and David...
DSA-1673-1 wireshark - several vulnerabilities
Bulletin has no description...
CVE-2008-4683
The CVE-2008-4683 vulnerability affects Wireshark’s Bluetooth ACL dissector (packet-bthci_acl.c) in versions 0.99.2 through 1.0.3, caused by an erroneous tvb_memcpy call in dissect_btacl. This allows remote attackers to trigger a denial of service (application crash/abort) by sending a packet wit...
CVE-2008-4683: Undefined Security Weakness
The dissectbtacl function in packet-bthciacl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via a packet with an invalid length, related to an erroneous tvbmemcpy call...