The vulnerability of the csnStreamDissector component (epan/dissectors/packet-csn1.c) in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the csnStreamDissector component epan/dissectors/packet-csn1.c in the Wireshark network traffic analyzer allows an attacker to cause a service failure by executing the operation outside of the buffer in memory...

OSV-2017-144 Global-buffer-overflow in csnStreamDissector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1436 Crash type: Global-buffer-overflow READ 2 Crash state: csnStreamDissector csnStreamDissector csnStreamDissector...

OSV-2017-120 Global-buffer-overflow in csnStreamDissector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1571 Crash type: Global-buffer-overflow READ 2 Crash state: csnStreamDissector csnStreamDissector csnStreamDissector...

wireshark: Global-buffer-overflow in csnStreamDissector

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=4584253100654592 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type:...

wireshark: Global-buffer-overflow in csnStreamDissector

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=6037121083113472 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id...

CVE-2013-1573: Improper Input Validation

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

PT-2013-3252

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue arises from the csnStreamDissector function in the CSN.1 dissector, which fails to properly handle a large number of padding bits. This allows...

Command injection

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-4100

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-4100

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-4100

Wireshark 1.6.x contains a DoS in the CSN.1 dissector (csnStreamDissector in epan/dissectors/packet-csn1.c) where an uninitialized variable can cause application crash when processing a malformed packet. Affected version range is 1.6.x before 1.6.3; upgrading to 1.6.3 fixes the issue (Mandriva ad...

CVE-2011-4100: Undefined Security Weakness

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-3482

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-3482

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-3482

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-3482: Undefined Security Weakness

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...