CVE-2017-9354

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was addressed in epan/dissectors/packet-rgmp.c by validating an IPv4 address...

CVE-2017-9343

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address...

CVE-2017-9343

Wireshark MSNIP dissector (affecting versions 2.2.0–2.2.6 and 2.0.0–2.0.12) is vulnerable due to a NULL pointer dereference caused by insufficient validation of an IPv4 address. The issue leads to denial of service (crash) when processing malicious packets or malformed traces. The root cause is i...

CVE-2017-9345

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers...

CVE-2017-9347

CVE-2017-9347 affects the Wireshark ROS dissector (versions 2.2.0–2.2.6). The issue is a NULL pointer dereference triggered by certain ROS packets, leading to a denial of service. The root cause is not fully detailed in all sources, but the fix was implemented in epan/dissectors/asn1/ros/packet-r...

CVE-2017-9348

CVE-2017-9348 – Wireshark DOF dissector buffer-read issue was caused by reading past the end of a buffer due to missing validation of a size value. Affected range: Wireshark 2.2.0 to 2.2.6. The root cause is inadequate size validation in the DOF dissector (epan/dissectors/packet-dof.c), which cou...

CVE-2017-9343

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address...

CVE-2017-9352

Wireshark CVE-2017-9352 affects the Bazaar (bzr) dissector: versions 2.2.0–2.2.6 and 2.0.0–2.0.12 can enter an infinite loop due to backwards parsing in epan/dissectors/packet-bzr.c. The fix was implemented by ensuring that backward parsing cannot occur. Technical details: affected products/versi...

CVE-2017-9348

In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value...

CVE-2017-9354

Wireshark CVE-2017-9354 affects the RGMP dissector in Wireshark 2.2.0–2.2.6 and 2.0.0–2.0.12, where an IPv4 address validation issue in epan/dissectors/packet-rgmp.c could cause a crash. The issue has been addressed in the upstream code by validating the IPv4 address in the RGMP dissector. Public...

CVE-2017-9351

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully...

CVE-2017-9353

In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address...

CVE-2017-9348

In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value...

CVE-2017-9347

In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID...

CVE-2017-9350

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by checking for a negative length...

Wireshark SIGCOMP Dissector 'packet-sigcomp.c' Infinite Loop Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark SIGCOMP Dissector 'packet-sigcomp.c' has an infinite loop denial of service...

Wireshark BGP dissector infinite loop denial of service vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. An infinite loop denial of service vulnerability exists in Wireshark BGP dissector. An...

Wireshark WSP Dissector 'packet-wsp.c' Infinite Loop Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark WSP Dissector 'packet-wsp.c' has an infinite loop denial of service...

openSUSE Security Update : wireshark (openSUSE-2017-503)

This update to Wireshark 2.2.6 fixes minor vulnerabilities that could be used to trigger a dissector crash or infinite loops by sending specially crafted packages over the network or into a capture file : - CVE-2017-7700: NetScaler file parser infinite loop boo1033936 - CVE-2017-7701: BGP dissect...

Wireshark 'dissectors/packet-imap.c' Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in Wireshark 'dissectors/packet-imap.c'. An...