EUVD-2018-11311

Malware in sbrugna...

EUVD-2013-4770

Malware in sbrugna...

EUVD-2015-8591

Malware in sbrugna...

EUVD-2013-4768

Malware in sbrugna...

EUVD-2013-4767

Malware in sbrugna...

K000150344: Multiple Wireshark/tshark vulnerabilities

Security Advisory Description CVE-2019-5721 In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided. CVE-2019-5719 In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to...

SUSE CVE-2015-8714

The dissectdcomOBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2018-19626

Missing initialization of buffer in DCOM dissector could allow Wireshark to crash when parsing a specially crafted pcap file. A remote attacker could cause a denial of service to Wireshark by injecting malicious packets into the network that are automatically processed. Moreover, the content of...

DEBIAN-CVE-2018-19626

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination...

CVE-2018-19626

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination...

CVE-2018-19626: Out-of-bounds Read

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination...

KLA11377 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A heap buffer over-read vulnerability in the Wireshark dissection engine can be...

PT-2018-2655

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.10 Wireshark versions 2.6.0 through 2.6.4 Description The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker using a specially crafted packet, potentially leading t...

Wireshark 1.12.x < 1.12.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.9 advisory. - The ngsnifferprocessrecord function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x befo...

CVE-2015-8714

The dissectdcomOBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Design/Logic Flaw

The dissectdcomOBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PT-2016-3962

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.8 Description The issue is related to the dissect dcom OBJREF function in the DCOM dissector, which does not properly initialize a certain IPv4 data structure. This allows remote attackers to cause a deni...

DEBIAN-CVE-2013-4924

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate certain index values, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

DEBIAN-CVE-2013-4922

Double free vulnerability in the dissectdcomActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service application crash via a crafted packet...