428 matches found
PT-2018-10519
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.14 Wireshark versions 2.4.0 through 2.4.6 Wireshark version 2.6.0 Description The issue is related to a crash in the GSM A DTAP dissector due to an off-by-one error that caused a buffer overflow. This error...
PT-2019-5766
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.15 Wireshark versions 2.6.0 through 2.6.9 Wireshark versions 3.0.0 through 3.0.2 Description The issue is related to the ASN.1 BER dissector and related dissectors in Wireshark, which could crash due to a...
PT-2018-18936
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.5 Description The issue concerns a crash in the TCP dissector. It was addressed by preserving valid data sources in the epan/dissectors/packet-tcp.c file. Recommendations For Wireshark versions 2.4.0 throug...
PT-2018-12454
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1 Description The issue arises from the MMSE dissector potentially entering an infinite loop. This was resolved by adding offse...
PT-2018-13392
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.16 Wireshark versions 2.4.0 through 2.4.8 Wireshark versions 2.6.0 through 2.6.2 Description The Bluetooth Attribute Protocol dissector could crash due to the lack of verification that a dissector for a...
PT-2018-12456
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1 Description The issue concerns dissectors that support zlib decompression, which could crash due to a buffer over-read when...
PT-2018-2654
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.10 Wireshark versions 2.6.0 through 2.6.4 Description The issue is related to a buffer over-read in memory, which could allow a remote attacker to cause a denial of service using a specially crafted packet...
PT-2018-10515
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.14 Wireshark versions 2.4.0 through 2.4.6 Wireshark version 2.6.0 Description The issue concerns excessive memory consumption by the LTP dissector and other dissectors in Wireshark. This was resolved by...
PT-2018-12471
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1 Description The IEEE 802.11 protocol dissector could crash due to a buffer over-read issue. This issue was addressed through bounds checking in the...
PT-2018-12468
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1 Description The Bazaar protocol dissector in Wireshark could enter an infinite loop due to improper handling of items that ar...
PT-2018-18938
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The IEEE 802.15.4 dissector in Wireshark could crash due to an issue with allocation. This was fixed by ensuring an allocation step occurs in the...
PT-2018-18946
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The issue is related to a memory leak in the epan/dissectors/packet-smb2.c file. Recommendations For Wireshark versions 2.2.0 through 2.2.13, update to ...
PT-2018-18948
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The issue is related to a memory leak in the epan/oids.c file. Recommendations For Wireshark versions 2.2.0 through 2.2.13, update to a version that...
PT-2018-18941
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The Kerberos dissector in Wireshark could crash due to a nonzero key length issue. This was addressed by ensuring a nonzero key length in the...
PT-2018-18945
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The issue is related to a memory leak in the epan/dissectors/packet-lapd.c file. Recommendations For Wireshark versions 2.2.0 through 2.2.13, update to ...
PT-2018-18949
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The issue is related to a memory leak in the epan/dissectors/packet-multipart.c file. Recommendations For Wireshark versions 2.2.0 through 2.2.13, updat...
PT-2018-18950
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The issue is related to a memory leak in the epan/dissectors/packet-h223.c file. Recommendations For Wireshark versions 2.2.0 through 2.2.13, update to ...
PT-2018-18951
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The issue is related to a memory leak in the epan/dissectors/packet-pcp.c file. Recommendations For Wireshark versions 2.2.0 through 2.2.13, update to a...
PT-2018-18942
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The issue is related to a heap-based buffer overflow in the ADB dissector, which could cause a crash. The problem was addressed by checking for a length...
