CVE-2016-4080

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

UBUNTU-CVE-2016-4080

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

UBUNTU-CVE-2016-4079

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause a denial of service out-of-bounds write and application crash via a crafted packet...

UBUNTU-CVE-2016-4084

Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a denial of service integer overflow and application crash via a crafted packet that triggers an unexpected array size...

UBUNTU-CVE-2016-4085

Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long string in a packet...

CVE-2016-4079

CVE-2016-4079 affects the Wireshark PKTC (packet-pktc.c) BER handling in the PKTC dissector, where BER identifiers are not verified. This can allow remote attackers to trigger a denial of service (out-of-bounds write and application crash) via a crafted packet. Affected are Wireshark 1.12.x befor...

CVE-2016-4076

CVE-2016-4076 affects Wireshark up to version 2.0.3 (Wireshark 2.0.x) where epan/dissectors/packet-ncp2222.inc in the NCP dissector does not properly initialize memory for search patterns, allowing remote attackers to cause a denial of service (application crash) via a crafted packet. The issue i...

CVE-2016-4082

CVE-2016-4082 affects the GSM CBCH dissector in Wireshark (epan/dissectors/packet-gsm_cbch.c). The root cause is using the wrong variable to index an array, which enables an attacker to trigger out-of-bounds access and cause a denial of service (crash) with a crafted packet. Affected versions: Wi...

CVE-2016-4076

epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-4081

epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2016-4080

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

CVE-2016-4083

epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not ensure that data is available before array allocation, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-4085

Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long string in a packet...

CVE-2016-4085

CVE-2016-4085 : In Wireshark 1.12.x prior to 1.12.11, a stack-based buffer overflow exists in the NCP dissector (epan/dissectors/packet-ncp2222.inc) within the Wireshark NCP dissector. A long string in a network packet can be used by a remote attacker to trigger a denial of service (application c...

CVE-2016-4080

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

CVE-2016-4081

CVE-2016-4081 : In Wireshark, the IAX2 dissector (epan/dissectors/packet-iax2.c) uses an incorrect integer data type, enabling a remote attacker to trigger a denial-of-service via a crafted IAX2 packet. Affected: Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3. Mitigation: upgrade to a fix...

CVE-2016-4079

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause a denial of service out-of-bounds write and application crash via a crafted packet...

wireshark-gtk: denial of service

CVE-2016-2522: The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service out-of-bounds read and application...

Wireshark 1.12.x < 1.12.10 Multiple Vulnerabilities (Mac OS X)

The version of Wireshark installed on the remote Mac OS X host is 1.12.x prior to 1.12.10. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure or a denial of service : - ASN.1 BER dissector - DNP dissector - GSM A-bis OML...

MGASA-2016-0091 Updated wireshark packages fix security vulnerabilities

Updated wireshark packages fix security vulnerabilities: ASN.1 BER dissector crash CVE-2016-2522. DNP dissector infinite loop CVE-2016-2523. X.509AF dissector crash CVE-2016-2524. HTTP/2 dissector crash CVE-2016-2525. HiQnet dissector crash CVE-2016-2526. 3GPP TS 32.423 Trace file parser crash...