Wireshark 1.4.x < 1.4.10 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.10 advisory. - The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark...

Wireshark csnStreamDissector Heap Buffer Overflow DoS

The vulnerability of the csnStreamDissector component epan/dissectors/packet-csn1.c in the Wireshark network traffic analyzer allows an attacker to cause a service failure by executing the operation outside of the buffer in memory...

OSV-2017-144 Global-buffer-overflow in csnStreamDissector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1436 Crash type: Global-buffer-overflow READ 2 Crash state: csnStreamDissector csnStreamDissector csnStreamDissector...

OSV-2017-120 Global-buffer-overflow in csnStreamDissector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1571 Crash type: Global-buffer-overflow READ 2 Crash state: csnStreamDissector csnStreamDissector csnStreamDissector...

PT-2021-27409

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 2. The crash state involves repeated calls to csnStreamDissector. No...

PT-2021-27400

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported due to a global buffer overflow read. The crash involves the csnStreamDissector function, which is repeated multiple times in t...

wireshark: Global-buffer-overflow in csnStreamDissector

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=4584253100654592 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type:...

wireshark: Global-buffer-overflow in csnStreamDissector

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=6037121083113472 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id...

CVE-2013-1573

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1573: Improper Input Validation

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

PT-2013-3252

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue arises from the csnStreamDissector function in the CSN.1 dissector, which fails to properly handle a large number of padding bits. This allows...

Command injection

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-4100

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-4100

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-4100

Wireshark 1.6.x contains a DoS in the CSN.1 dissector (csnStreamDissector in epan/dissectors/packet-csn1.c) where an uninitialized variable can cause application crash when processing a malformed packet. Affected version range is 1.6.x before 1.6.3; upgrading to 1.6.3 fixes the issue (Mandriva ad...

CVE-2011-4100: Undefined Security Weakness

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-3482

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-3482

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-3482

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-3482

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...