48 matches found
DEBIAN-CVE-2014-6426
The dissecthiptlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle a NULL tree, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...
DEBIAN-CVE-2014-5161
The dissectlog function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet...
CVE-2013-4922
CVE-2013-4922 is a double free vulnerability in the Wireshark DCOM ISystemActivator dissector (function dissect_dcom_sysact.c) affecting Wireshark 1.10.x before 1.10.1, leading to denial of service via crafted packets. Remediation: upgrade to Wireshark 1.10.1 or apply vendor patches; affected adv...
CVE-2013-3558
CVE-2013-3558 affects Wireshark’s PPP CCP dissector in the 1.8.x line. The vulnerable component is the dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c, which fails to terminate a bit-field list, enabling remote attackers to crash the application via a malformed packet. The adviso...
Wireshark: Multiple stack consumption vulnerabilities caused DoS via crafted SMB or CLDAP packet
Multiple stack consumption vulnerabilities in the dissectmscompressedstring and dissectmscldapstring functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service infinite recursion via a crafted 1 SMB or 2 Connection-less LDAP CLD...
security flaw
Stack-based buffer overflow in the dissectospfv3addressprefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets...
PT-2005-4059 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.3 through 0.10.12 Description: The issue is related to an unspecified vulnerability in the ONC RPC dissector. When the "Dissect unknown RPC program numbers" option is enabled, it allows remote attackers to cause a denia...
Ethereal <= 0.10.10 (dissect_ipc_state) Remote Denial of Service Exploit
Exploit for multiple platform in category dos / poc ======================================================================== Ethereal / / / / From the Ethereal Security Advisory 19 : / / http://www.ethereal.com/appnotes/enpa-sa-00019.html / / / / "The SMB dissector could cause a segmentation faul...