CVE-2015-8738

The CVE-2015-8738 entry is supported by connected documents showing a DoS vulnerability in Wireshark 2.0.x before 2.0.1 via the S7COMM SZL handler. Specifically, the s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c does not validate the SZL response list count,...

CVE-2015-8719

CVE-2015-8719 affects Wireshark 1.12.x before 1.12.9. The DNS dissector (epan/dissectors/packet-dns.c) mishandles the EDNS0 Client Subnet option in dissect_dns_answer, enabling remote attackers to trigger an application crash (DoS) via a crafted packet. The impact is a denial of service with part...

CVE-2015-8722

Wireshark SCTP dissector (epan/dissectors/packet-sctp.c) is affected by CVE-2015-8722. In Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, the frame pointer is not validated, allowing a crafted SCTP packet to trigger a NULL pointer dereference and cause a denial of service (application cras...

CVE-2015-8713

CVE-2015-8713 affects Wireshark 1.12.x before 1.12.9. The UMTS FP dissector (epan/dissectors/packet-umts_fp.c) does not properly reserve memory for channel ID mappings, enabling an attacker to cause a denial of service via a crafted UDP/TCP packet that triggers out-of-bounds memory access and app...

CVE-2015-8727

CVE-2015-8727 : In the Wireshark RSVP dissector (epan/dissectors/packet-rsvp.c), the function dissect_rsvp_common does not properly maintain request-key data in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, enabling remote attackers to cause a denial of service (use-after-free and applic...

CVE-2015-8731

Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 are affected by CVE-2015-8731 in the RSL dissector (epan/dissectors/packet-rsl.c): not rejecting unknown TLV types can cause an out-of-bounds read and application crash via a crafted packet (DoS). Remediation: upgrade to Wireshark 1.12.9 or 2....

CVE-2015-3182

epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8717

The dissectsdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8739

The ipmifmtudpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

CVE-2015-8720

The dissectberGeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8740

The dissecttds7colmetadatatoken function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...

CVE-2015-8742

The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

CVE-2015-8734

The dissectnwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8725

The dissectdiameterbaseframedipv6prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service stack-based buffer overflow...

CVE-2015-8730

CVE-2015-8730 affects Wireshark NBAP dissector (epan/dissectors/packet-nbap.c): versions 1.12.x before 1.12.9 and 2.0.x before 2.0.1 do not validate the number of items in a crafted packet, enabling a denial of service via invalid read and crash. Affected products: Wireshark 1.12.x, 2.0.x; vulner...

CVE-2015-8718

Wireshark vulnerability CVE-2015-8718: a double-free in epan/dissectors/packet-nlm.c (NLM dissector) can cause an application crash when the Match MSG/RES packets for async NLM option is enabled. Affected: Wireshark 1.12.x prior to 1.12.9 and 2.0.x prior to 2.0.1. Exploitation via crafted network...

CVE-2015-8730

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers to cause a denial of service invalid read operation and application crash via a crafted packet...

CVE-2015-8717

Wireshark SDP dissector (epan/dissectors/packet-sdp.c) in Wireshark 1.12.x before 1.12.9 is vulnerable: it does not prevent use of a negative media count, enabling a remote attacker to crash the application via a crafted packet. Affected component: SDP dissector; root cause: negative media count ...

CVE-2015-8724

CVE-2015-8724 affects Wireshark’s 802.11 dissector: the AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c does not verify the WPA broadcast key length. This can be exploited by a crafted packet to cause an out-of-bounds read and application crash (DoS). Affected releases include Wi...

CVE-2015-8734

The CVE-2015-8734 issue affects Wireshark 2.0.x prior to 2.0.1, where the NWP dissector (epan/dissectors/packet-nwp.c) mishandles the packet type, allowing remote attackers to cause a denial of service (application crash) with a crafted packet. The vulnerability is addressed by upgrading to Wires...