CVE-2013-1583

CVE-2013-1583 affects the Wireshark DTN dissector (epan/dissectors/packet-dtn.c). The root cause is an inappropriate pointer access in dissect_version_4_primary_header that can be triggered by a malformed DTN packet, allowing a remote attacker to crash the application (denial of service). Public ...

CVE-2013-1585

epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1583

The dissectversion4primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1586

CVE-2013-1586 affects Wireshark DTLS dissector: the fragment_set_tot_len logic in epan/reassemble.c fails to correctly determine the length of a reassembled packet, enabling a remote attacker to crash the application (DoS). Affected products/versions include Wireshark 1.6.x before 1.6.13 and 1.8....

CVE-2013-1575

CVE-2013-1575 affects the Wireshark R3 dissector (epan/dissectors/packet-assa_r3.c). Versions impacted: Wireshark 1.6.x prior to 1.6.13 and 1.8.x prior to 1.8.5. Root cause: the R3 dissector fails to handle a certain alarm length in the packet, which can cause a denial of service via an infinite ...

CVE-2013-1576

The dissectsdpmediaattribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1584

The dissectversion5and6primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1575

The dissectr3cmdalarmconfigure function in epan/dissectors/packet-assar3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1575

The dissectr3cmdalarmconfigure function in epan/dissectors/packet-assar3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1584

The dissectversion5and6primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1590

Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1582

The dissectclnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service infinite loop or application crash via a malformed packet...

CVE-2013-1576

The dissectsdpmediaattribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1584

The CVE-2013-1584 issue affects Wireshark’s DTN dissector. The root cause is an inappropriate pointer access in dissect_version_5_and_6_primary_header within epan/dissectors/packet-dtn.c, exploitable via malformed DTN packets to cause a denial of service (application crash). It affects Wireshark ...

CVE-2013-1579

Wireshark contains a vulnerability CVE-2013-1579 in the RTPS dissector (epan/dissectors/packet-rtps.c) where malformed RTPS bitmap data can cause an infinite loop, leading to denial of service. Affected were Wireshark 1.6.x prior to 1.6.13 and 1.8.x prior to 1.8.5; exploitation would arise from p...

CVE-2013-1573

Wireshark vulnerability CVE-2013-1573 affects the CSN.1 dissector (epan/dissectors/packet-csn1.c). The csnStreamDissector fails to properly handle a large number of padding bits, enabling remote attackers to cause a denial of service via an infinite loop when processing a malformed packet. Affect...

CVE-2013-1588

CVE-2013-1588 concerns the Wireshark DCP-ETSI dissector. Technical detail: the vulnerability arises in the dissect_pft_fec_detailed function within Wireshark’s epan/dissectors/packet-dcp-etsi.c, where malformed packets can trigger buffer-related issues. Affected software versions are Wireshark 1....

CVE-2013-1576

Wireshark CVE-2013-1576 affects the SDP dissector (epan/dissectors/packet-sdp.c): malformed crypto-suite parameters can trigger an infinite loop, risking denial of service. Affected versions are Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5. Remediation is to upgrade to at least Wireshark ...

CVE-2013-1581

The dissectpftfecdetailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service loop via a malformed packet...

CVE-2013-1583

The dissectversion4primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...