Debian DSA-3505-1 : wireshark - security update

Multiple vulnerabilities were discovered in the dissectors/parsers for Pcapng, NBAP, UMTS FP, DCOM, AllJoyn, T.38, SDP, NLM, DNS, BED, SCTP, 802.11, DIAMETER, VeriWave, RVSP, ANSi A, GSM A, Ascend, NBAP, ZigBee ZCL and Sniffer which could result in denial of service. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] [DSA 3505-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3505-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 04, 2016 https://www.debian.org/security/faq -...

DSA-3505-1 wireshark - security update

Bulletin has no description...

Debian Security Advisory DSA 3505-1 (wireshark - security update)

Multiple vulnerabilities were discovered in the dissectors/parsers for Pcapng, NBAP, UMTS FP, DCOM, AllJoyn, T.38, SDP, NLM, DNS, BED, SCTP, 802.11, DIAMETER, VeriWave, RVSP, ANSi A, GSM A, Ascend, NBAP, ZigBee ZCL and Sniffer which could result in denial of service. OpenVAS Vulnerability Test $I...

Wireshark 1.12.x < 1.12.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.9 advisory. - The ngsnifferprocessrecord function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x befo...

Wireshark UMTS FP Parser Denial of Service Vulnerability (CNVD-2016-00066)

Wireshark is the most popular network protocol parser. With Wireshark version 1.12.x prior to 1.12.9, epan/dissectors/packet-umtsfp.c in the UMTS FP parser does not properly reserve memory for tunnel ID mapping, and by constructing packets, a remote attacker can cause a denial of service...

CVE-2015-8713

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service out-of-bounds memory access and application crash via a crafted packet...

CVE-2015-8712

The dissecthsdschchannelinfo function in epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Out-of-bounds

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service out-of-bounds memory access and application crash via a crafted packet...

CVE-2015-8713

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service out-of-bounds memory access and application crash via a crafted packet...

CVE-2015-8712

The dissecthsdschchannelinfo function in epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Code injection

The dissecthsdschchannelinfo function in epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8712

The dissecthsdschchannelinfo function in epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8713

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service out-of-bounds memory access and application crash via a crafted packet...

CVE-2015-8712

CVE-2015-8712 affects the UMTS FP dissector in Wireshark 1.12.x (epan/dissectors/packet-umts_fp.c). The vulnerability arises because dissect_hsdsch_channel_info does not validate the number of PDUs, enabling remote attackers to crash the application (DoS) via a crafted packet. The issue is constr...

CVE-2015-8713

CVE-2015-8713 affects Wireshark 1.12.x before 1.12.9. The UMTS FP dissector (epan/dissectors/packet-umts_fp.c) does not properly reserve memory for channel ID mappings, enabling an attacker to cause a denial of service via a crafted UDP/TCP packet that triggers out-of-bounds memory access and app...

CVE-2015-8713: Improper Input Validation

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service out-of-bounds memory access and application crash via a crafted packet...

CVE-2015-8712: Improper Input Validation

The dissecthsdschchannelinfo function in epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PT-2016-3960

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.8 Description The issue is related to the dissect hsdsch channel info function in the UMTS FP dissector, which does not validate the number of PDUs. This allows remote attackers to cause a denial of...

PT-2016-3961

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.8 Description The issue is related to the UMTS FP dissector in Wireshark, where memory for channel ID mappings is not properly reserved. This allows remote attackers to cause a denial of service by crashi...