M3UAScan

M3UAScan 一个用于检测支持Sigtran节点的M3UA协议扫描器 M3UA代表MTP第三层（MTP3）用户适配层，由IETF SIGTRAN工作组在RFC 4666中定义。M3UA使SS7协议的用户部分（例如ISUP、SCCP和TUP）能够通过IP运行，而不是通过ISDN和PSTN等电话设备。建议使用SCTP服务来传输M3UA。 M3UA使用一个复杂的状态机来管理和指示其运行状态。要使M3UA关联或对等完全功能化，必须使用若干M3UA消息（ASP UP、ASP UP确认、ASP Active、ASP Active确认）。 为什么使用M3UAScan...

EUVD-2014-2320

Malware in sbrugna...

SUSE CVE-2014-2282

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

Mageia: Security Advisory (MGASA-2014-0126)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

M3UAScan - A Scanner for M3UA protocol to detect Sigtran supporting nodes

A Scanner for M3UA protocol to detect Sigtran supporting nodes M3UA stands for MTP Level 3 MTP3 User Adaptation Layer as defined by the IETF SIGTRAN working group in RFC 4666 .M3UA enables the SS7 protocol's User Parts e.g. ISUP, SCCP and TUP to run over IP instead of telephony equipment like ISD...

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark10)

The remote Solaris system is missing necessary patches to address security updates : - The nfsnamesnoopaddname function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote...

Wireshark M3UA Dissector拒绝服务漏洞

Bugtraq ID：66070 CVE ID：CVE-2014-2282 Wireshark（前称Ethereal）是一款非常流行的开源网络流量分析软件。 由于程序没有正确处理某些类型的数据包，攻击者可以利用漏洞是受影响程序崩溃，拒绝服务合法用户。 0 Wireshark 1.10.0 - 1.10.5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wireshark.org/...

Wireshark 'M3UA' Denial of Service Vulnerability-01 (Mar 2014) - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark 'M3UA' Denial of Service Vulnerability-01 (Mar 2014) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

CVE-2014-2282

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

DEBIAN-CVE-2014-2282

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

Design/Logic Flaw

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

CVE-2014-2282

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

CVE-2014-2282

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

CVE-2014-2282

CVE-2014-2282 (Wireshark) affects the M3UA dissector in Wireshark 1.10.x prior to 1.10.6. The root cause is a memory allocation flaw in the epan/dissectors/packet-m3ua.c code, which can be triggered by a crafted SS7 MTP3 packet, leading to a denial of service (application crash). The provided doc...

CVE-2014-2282

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

Wireshark 1.10.x < 1.10.6 Multiple Vulnerabilities

The installed version of Wireshark 1.10.x is a version prior to 1.10.6. It is, therefore, affected by denial of service vulnerabilities in the following dissectors : - NFS dissector CVE-2014-2281 - M3UA dissector CVE-2014-2282 - RLC dissector CVE-2014-2283 Additionally, a flaw exists in the...

Updated wireshark packages fix multiple vulnerabilies

The NFS dissector could crash CVE-2014-2281. The M3UA dissector could crash CVE-2014-2282. The RLC dissector could crash CVE-2014-2283. The MPEG file parser could overflow a buffer CVE-2014-2299...