CVE-2018-5336

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparse.c by limiting the recursion depth...

CVE-2018-5336: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparse.c by limiting the recursion depth...

CVE-2018-5335: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/packet-wcp.c by validating the available buffer length...

PT-2018-16904

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.11 Wireshark versions 2.4.0 through 2.4.3 Description The issue concerns the JSON, XML, NTP, XMPP, and GDB dissectors in Wireshark, which could crash due to excessive recursion. This was resolved by limitin...

CVE-2017-17997

Wireshark vulnerability CVE-2017-17997 affects the MRDISC dissector prior to version 2.2.12, where a NULL pointer dereference could crash the dissector when parsing IPv4 addresses. The issue was fixed by adding validation of an IPv4 address in epan/dissectors/packet-mrdisc.c. Public references in...

CVE-2017-17997: NULL Pointer Dereference

In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343...

DEBIAN-CVE-2017-17084

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARPMPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length...

PT-2017-14699

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.10 Wireshark versions 2.4.0 through 2.4.2 Description The issue concerns a potential crash in the NetBIOS dissector. This was resolved by modifying the epan/dissectors/packet-netbios.c file to ensure that...

CVE-2017-17083: Improper Check for Unusual or Exceptional Conditions

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer...

ALPINE-CVE-2017-15193

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach...

CVE-2017-15191

CVE-2017-15191 affects Wireshark 2.0.0–2.4.1 (including 2.2.0–2.2.9 and 2.4.0–2.4.1). The DMP dissector contains a length-check flaw in 7‑bit string handling that can cause an application crash when processing malformed packets, potentially enabling a denial of service. The issue has been fixed u...

CVE-2017-15192

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level...

CVE-2017-15191: Use of Externally-Controlled Format String

In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length...

CVE-2017-15190: Undefined Security Weakness

In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash. This was addressed in epan/dissectors/packet-rtsp.c by correcting the scope of a variable...

PT-2017-13884

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.15 Wireshark versions 2.2.0 through 2.2.9 Wireshark versions 2.4.0 through 2.4.1 Description The issue concerns a potential crash in the DMP dissector due to improper validation of a string length. This cou...

CVE-2017-15192: Undefined Security Weakness

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level...

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

CVE-2017-13767: Improper Input Validation

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation...