PT-2020-22405

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash occurs in the following functions: decode tlv, dissect noe, and call...

PT-2020-22274

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the fuzzshark ip proto-udp function, g hash table lookup, and...

PT-2020-22215

Name of the Vulnerable Software and Affected Versions Wireshark affected versions not specified Description The issue is related to a global buffer overflow read of 8 bytes. Technical details about the crash state indicate involvement of the dissect wassp sub tlv and dissect wassp tlv functions. ...

PT-2020-22035

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. Technical details include the involvement of specific functions such as tvb get ipv4 addr with...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_rtcp_rtpfb_transport_cc

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5763596639272960 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type:...

Linux Kernel skb_flow_dissect Buffer Overflow DoS

The vulnerability of the skbflowdissect function in the flowdissector.c file of the Linux kernel’s network subsystem is related to insufficient input validation. The function returns a value of true for the keycontrol protocol without setting values for nproto, ipproto, and thoff. Exploiting this...

PT-2017-19172

Name of the Vulnerable Software and Affected Versions Wireshark version 2.2.7 Description The issue allows remote attackers to cause a denial of service, specifically a stack exhaustion, in the dissect IODWriteReq function. This occurs when handling PROFINET IO data with a high recursion depth...

CVE-2017-9616

In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion uncontrolled recursion in the dissectmp4box function in epan/dissectors/file-mp4.c...

PT-2017-19075

Name of the Vulnerable Software and Affected Versions Wireshark version 2.2.7 Description The issue is related to overly deep mp4 chunks that may cause stack exhaustion due to uncontrolled recursion in the dissect mp4 box function. Recommendations For Wireshark version 2.2.7, consider updating to...

PT-2017-19076

Name of the Vulnerable Software and Affected Versions Wireshark version 2.2.7 Description The issue is related to deeply nested DAAP data, which may cause stack exhaustion due to uncontrolled recursion in the dissect daap one tag function in the DAAP dissector. Recommendations For Wireshark versi...

Wireshark 1.12.0 < 1.12.12 - NDS Dissector Denial of Service

Exploit for multiple platform in category dos / poc Sample generated with AFL Build Information: TShark 1.12.9 v1.12.9-0-gfadb421 from HEAD Copyright 1998-2015 Gerald Combs and contributors. This is free software; see the source for copying conditions. There is NO warranty; not even for...

Wireshark 1.12.0 < 1.12.12 - NDS Dissector Denial of Service

Sample generated with AFL Build Information: TShark 1.12.9 v1.12.9-0-gfadb421 from HEAD Copyright 1998-2015 Gerald Combs and contributors. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Compiled...

Wireshark Network Protocol Analyzer Compromise

The vulnerability of Wireshark’s dissectframe function, located in the epan/dissectors/packet-frame.c file, stems from the use of negative integers as packet length values. Exploiting this vulnerability allows a remote attacker to cause a service failure abrupt termination of the application by...

Wireshark Network Protocol Analyzer Compromise

A vulnerability exists in the dissectspdu function within the SES dissector in Wireshark, due to the lack of initialization for a certain identifier. Exploiting this vulnerability allows malicious actors operating remotely to cause a service failure abrupt termination of an application by using a...

PT-2016-5190

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.9 Wireshark versions 2.0.x through 2.0.1 Description The issue is related to the dissect llrp parameters function in the LLRP dissector, which does not limit the recursion depth. This allows remote...

PT-2016-3965

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.8 Description The issue is related to the dissect sdp function in the SDP dissector, which does not prevent the use of a negative media count. This allows remote attackers to cause a denial of service,...

PT-2015-7133

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.6 Description The issue is related to the dissect zbee secure function in the ZigBee dissector, which improperly relies on length fields contained in packet data. This allows remote attackers to cause a...

PT-2015-6334

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.13 Wireshark versions 1.12.x through 1.12.4 Description The issue arises from the dissect tfs request and dissect tfs response functions in the IEEE 802.11 dissector, which misinterpret a zero value as a...

PT-2015-5653

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.12 Wireshark versions 1.12.x through 1.12.3 Description The issue is related to an integer overflow in the dissect tnef function, which can cause a denial of service due to an infinite loop. This occurs...

DEBIAN-CVE-2014-6426

The dissecthiptlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle a NULL tree, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...