Double free

Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service application crash via a malformed packet...

UBUNTU-CVE-2013-1589

Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1585

Wireshark is affected by CVE-2013-1585 due to improper validation of certain length values in the MS-MMC dissector code path (epan/tvbuff.c), allowing remote attackers to crash the application via malformed packets. Affected lines indicate vulnerable releases are Wireshark 1.6.x prior to 1.6.13 a...

CVE-2013-1586

The fragmentsettotlen function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1589

Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1589: Undefined Security Weakness

Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1585: Improper Input Validation

epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1586: Undefined Security Weakness

The fragmentsettotlen function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service application crash via a malformed packet...

PT-2013-3264

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the epan/tvbuff.c file of Wireshark due to incorrect validation of length values for the MS-MMC dissector. This allows remote...

PT-2013-3265

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the fragment set tot len function in epan/reassemble.c due to incorrect determination of the length of a reassembled packet for the...

PT-2013-3268

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue is related to a double free vulnerability in the dissection engine of Wireshark, specifically in the epan/proto.c file. This vulnerability...

CVE-2012-4049

CVE-2012-4049 affects Wireshark’s NFS dissector. According to connected advisories, the vulnerability exists in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1, where a crafted NFS packet can trigger a denial of service via a loop and increased CPU usage. Remediation men...

wireshark: NULL pointer vulnerabilities (wnpa-sec-2012-02)

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet, related to epan/tostr.c...

DEBIAN-CVE-2012-0042

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet, related to epan/tostr.c...

CVE-2012-1594

epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers to cause a denial of service infinite loop via a crafted packet...

Null pointer dereference

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet, related to epan/tostr.c...

CVE-2012-0042

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet, related to epan/tostr.c...

CVE-2012-0042: Undefined Security Weakness

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet, related to epan/tostr.c...

PT-2012-2260

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.10 Wireshark versions 1.6.x through 1.6.4 Description The issue is related to improper string conversions, which can be exploited by remote attackers to cause a denial of service. This is achieved by sendin...

Wireshark CSN.1 Dissector Denial of Service Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...