PT-2014-1763

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.0 Description The issue exists in the dissect hip tlv function due to improper handling of a NULL tree, allowing remote attackers to cause a denial of service infinite loop via a crafted packet. This can ...

PT-2014-1752

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.9 Wireshark versions 1.12.x through 1.12.0 Description The issue exists in the dissect spdu function in the SES dissector due to the lack of initialization of a certain ID value. This allows remote...

DEBIAN-CVE-2014-5161

The dissectlog function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet...

PT-2014-1765

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.7 Description The issue arises from the interpretation of negative integers as length values in the dissect frame function, located in epan/dissectors/packet-frame.c, within the frame metadissector of...

PT-2013-6278

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.11 Wireshark versions 1.10.x through 1.10.3 Description The issue is related to the dissect sip common function in the SIP dissector, which does not check for empty lines. This allows remote attackers to...

PT-2013-5753

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.9 Wireshark versions 1.10.x through 1.10.1 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted packet. This is due to the dissect mq ...

CVE-2013-4922

CVE-2013-4922 is a double free vulnerability in the Wireshark DCOM ISystemActivator dissector (function dissect_dcom_sysact.c) affecting Wireshark 1.10.x before 1.10.1, leading to denial of service via crafted packets. Remediation: upgrade to Wireshark 1.10.1 or apply vendor patches; affected adv...

CVE-2013-3558

CVE-2013-3558 affects Wireshark’s PPP CCP dissector in the 1.8.x line. The vulnerable component is the dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c, which fails to terminate a bit-field list, enabling remote attackers to crash the application via a malformed packet. The adviso...

PT-2013-4480

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.6 Description The issue is related to the dissect dsmcc un download function in the MPEG DSM-CC dissector, which uses an incorrect format string. This allows remote attackers to cause a denial of service,...

PT-2013-3819

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.0 through 1.8.5 Description The issue is related to the dissect diagnosticrequest function in the REsource LOcation And Discovery RELOAD dissector, which uses an incorrect integer data type. This allows remote attackers ...

PT-2013-3809

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by sending a packet with a header that is too short. This is related to the dissect hartip functi...

PT-2013-3812

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by providing invalid Sub-tlv data to the dissect mpls echo tlv dd map function in the MPLS Echo...

PT-2013-3263

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the dissect version 5 and 6 primary header function due to accessing an inappropriate pointer, allowing remote attackers to cause a...

PT-2013-3262

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the dissect version 4 primary header function in the DTN dissector, which accesses an inappropriate pointer. This allows remote...

PT-2013-3257

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the dissect pw eth heuristic function due to incorrect handling of apparent Ethernet address values at the beginning of MPLS data...

PT-2013-3260

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the dissect pft fec detailed function due to incorrect handling of fragment gaps, allowing remote attackers to cause a denial of...

PT-2013-3261

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the dissect clnp function due to incorrect handling of an offset variable. This allows remote attackers to cause a denial of service...

PT-2012-6250

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.11 Wireshark versions 1.8.x through 1.8.3 Description The issue is related to the dissect wtp common function in the WTP dissector, which uses an incorrect data type for a certain length field. This allows...

PT-2012-6247

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.11 Wireshark versions 1.8.x through 1.8.3 Description The issue is related to an integer overflow in the dissect icmpv6 function, which can be exploited by remote attackers to cause a denial of service,...

PT-2012-6248

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.11 Wireshark versions 1.8.x through 1.8.3 Description The issue is related to the dissect isakmp function in the ISAKMP dissector, which incorrectly determines IKEv2 decryption parameters. This can be...