CVE-2011-3484

The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly validate a certain frame size, which allows remote attackers to cause a denial of service loop and application crash via a malformed packet...

CVE-2011-3482

CVE-2011-3482 affects Wireshark 1.6.x before 1.6.2. The vulnerability arises because the csnStreamDissector function in epan/dissectors/packet-csn1.c does not initialize a member of a structure, enabling remote attackers to cause a denial of service (application crash) via a malformed CSN.1 packe...

CVE-2011-3482

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-3484: Improper Input Validation

The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly validate a certain frame size, which allows remote attackers to cause a denial of service loop and application crash via a malformed packet...

PT-2011-4466

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.0 through 1.6.1 Description The issue is related to the unxorFrame function in the OpenSafety dissector, which does not properly validate a certain frame size. This allows remote attackers to cause a denial of service,...

Colasoft Capsa7.2.1 Malformed SNMP Packet Denial of Service

Colasoft Capsa ,a commercial software,is a powerful network packet analyzer,and you can get it from http://www.colasoft.com.cn Chinaand http://www.javvin.comUSA. -------------------------------------------------- I. Summary A flaw has been identified in Colasoft Capsa 7.2.1 concerning SNMPv1...

Tcptrack Command Line Parsing Heap Based Buffer Overflow Vulnerability

This host is installed with Tcptrack and is prone to heap based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbtcptracklongcommandbofvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Tcptrack Command Line Parsing Heap Based Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright...

Wireshark 1.6.x < 1.6.2 Multiple Vulnerabilities

The installed version of Wireshark is 1.6.x before 1.6.2. This version is affected by the following vulnerabilities : - An error exists in IKE dissector that can allow denial of service attacks when processing certain malformed packets. CVE-2011-3266 - A buffer exception handling vulnerability...

Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.9 advisory. - Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service application crash via a...

Design/Logic Flaw

The prototreeadditem function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service infinite loop via vectors involving a malformed IKE packet and many items in a tree...

CVE-2011-3266

Wireshark vulnerability CVE-2011-3266 affects the IKEv1 dissector: the proto_tree_add_item handling can be exploited by a malformed IKE packet with many items to trigger a denial of service (infinite loop). Affected versions per connected sources: Wireshark 1.6.0–1.6.1 and 1.4.0–1.4.8. Root cause...

DEBIAN-CVE-2011-2698

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

Code injection

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

CVE-2011-2698

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

CVE-2011-2698

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

PT-2011-4356

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.0 through 1.4.8 Wireshark versions 1.6.0 through 1.6.1 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, when the IKEv1 protocol dissector is used in Wireshark. Th...

PT-2011-4032

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.7 Wireshark versions 1.6.x through 1.6.0 Description The issue is caused by an off-by-one error in the elem cell id aux function in the ANSI MAP dissector. This error allows remote attackers to cause a deni...

Fedora 14 : wireshark-1.4.8-1.fc14 (2011-9640)

Wireshark 1.4.8 fixes the following vulnerabilities : The Lucent/Ascend file parser was susceptible to an infinite loop. CVE-2011-2597. The ANSI MAP dissector was susceptible to an infinite loop. CVE-2011-2698. Note that Tenable Network Security has extracted the preceding description block...

Wireshark 1.6.1 Malformed IKE Packet Denial of Service

Wireshark 1.6.1 Malformed IKE Packet Denial of Service ------------------------------------------------------------------ I. Summary A flaw has been identified in Wireshark 1.6.1 concerning IKEv1 protocol dissector and the function prototreeadditem ,when add more than 1000000 items to a...

Wireshark 1.6.1 Malformed IKE Packet Denial of Service

No description provided by source. Wireshark 1.6.1 Malformed IKE Packet Denial of Service ------------------------------------------------------------------ I. Summary A flaw has been identified in Wireshark 1.6.1 concerning IKEv1 protocol dissector and \ the function prototreeadditem ,when add...