Astra Linux – Vulnerability in Wireshark

In Wireshark versions 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This issue was addressed in the epan/dissectors/packet-multipart.c file by correcting the deallocation of invalid MIME parts...

Wireshark frame_add_comment function Heap Buffer Overflow DoS

The vulnerability of the frameaddcomment function in the Wireshark network traffic analyzer program epan/dissectors/packet-frame.c is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cause service failures...

EUVD-2018-3396

Malware in sbrugna...

EUVD-2018-3391

Malware in sbrugna...

EUVD-2018-20866

Malware in sbrugna...

EUVD-2018-20860

Malware in sbrugna...

EUVD-2018-20861

Malware in sbrugna...

EUVD-2018-20850

Malware in sbrugna...

EUVD-2019-15290

Malware in sbrugna...

SUSE CVE-2016-7958

In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector...

SUSE CVE-2017-7701

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type...

SUSE CVE-2020-7045

In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes...

PT-2020-6571

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.2.0 through 3.2.7 Description The issue is related to the GQUIC dissector in Wireshark, which could cause a crash. This was due to an incorrect implementation of offset advancement. The problem can be exploited by a remote...

CVE-2020-26575

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

CVE-2020-25866

In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed not uncompressed messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs...

CVE-2020-25863: Undefined Security Weakness

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts...

CVE-2020-26575: Loop with Unreachable Exit Condition

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

PT-2020-5495

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.2.7 and earlier Description The issue is related to the Facebook Zero Protocol FBZERO dissector in Wireshark, which could enter an infinite loop. This could allow a remote attacker to cause a denial of service. The problem...

PT-2020-5493

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.0.0 through 3.0.13 Wireshark versions 3.2.0 through 3.2.6 Description The issue is related to a NULL pointer dereference in the BLIP protocol dissector due to a buffer being sized for compressed messages, not uncompressed...

CVE-2020-15466: Loop with Unreachable Exit Condition

In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations...