FreeBSD : wireshark -- multiple vulnerabilities (8a835235-ae84-11dc-a5f9-001a4d49522b)

The Wireshark team reports of multiple vulnerabilities : - Wireshark could crash when reading an MP3 file. - Beyond Security discovered that Wireshark could loop excessively while reading a malformed DNP packet. - Stefan Esser discovered a buffer overflow in the SSL dissector. - The ANSI MAP...

Design/Logic Flaw

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6439

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

DEBIAN-CVE-2007-6451

Unspecified vulnerability in the CIP dissector in Wireshark formerly Ethereal 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors that trigger allocation of large amounts of memory...

DEBIAN-CVE-2007-6439

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6438

Unspecified vulnerability in the SMB dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111...

CVE-2007-6441

The WiMAX dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors related to "unaligned access on some platforms."...

CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6438

Unspecified vulnerability in the SMB dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111...

DEBIAN-CVE-2007-6441

The WiMAX dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors related to "unaligned access on some platforms."...

CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

Code injection

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

CVE-2007-6439

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

DEBIAN-CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6441

The WiMAX dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors related to "unaligned access on some platforms."...

CVE-2007-6450

The RPL dissector in Wireshark formerly Ethereal 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2007-6438

Wireshark (formerly Ethereal) SMB dissector vulnerability CVE-2007-6438 affects version 0.99.6, allowing remote denial of service via unknown vectors. The Connected MiracleLinux listings include CVE-2007-6438 among a broader set of Wireshark-related issues but do not provide a concrete patch/vers...

CVE-2007-6450

The CVE-2007-6450 issue affects Wireshark (Ethereal) 0.9.8–0.99.6, where the RPL dissector can be abused by remote attackers to trigger an infinite loop, causing a denial of service. Several Nessus/CentOS/Oracle/MiracleLinux advisories confirm this vulnerability and reference Wireshark 0.99.7 as ...

CVE-2007-6451

Unspecified vulnerability in the CIP dissector in Wireshark formerly Ethereal 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors that trigger allocation of large amounts of memory...