19 matches found
Wireshark 1.6.x < 1.6.14 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.14 advisory. - The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the...
EUVD-2013-2424
Malware in sbrugna...
CVE-2023-0667
A flaw was found in the Wireshark package. Due to failure in validating the length provided by an attacker-crafted MS-MMS packet, Wireshark, in an unusual configuration, is susceptible to a heap-based buffer overflow. This issue may result in a crash...
SUSE CVE-2013-2478
The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...
openSUSE Security Update : wireshark (openSUSE-SU-2013:0494-1)
wireshark was updated to 1.8.6 bnc807942 + vulnerabilities fixed : - The TCP dissector could crash. wnpa-sec-2013-10 CVE-2013-2475 - The HART/IP dissectory could go into an infinite loop. wnpa-sec-2013-11 CVE-2013-2476 - The CSN.1 dissector could crash. wnpa-sec-2013-12 CVE-2013-2477 - The MS-MMS...
SuSE 11.2 Security Update : wireshark (SAT Patch Number 7490)
wireshark has been updated to 1.8.6 which fixes bugs and security issues : Vulnerabilities fixed : - The TCP dissector could crash. wnpa-sec-2013-10. CVE-2013-2475 - The HART/IP dissectory could go into an infinite loop. wnpa-sec-2013-11. CVE-2013-2476 - The CSN.1 dissector could crash...
SuSE 10 Security Update : wireshark (ZYPP Patch Number 8500)
wireshark has been updated to 1.6.14 to fix bugs and security issues : Vulnerabilities fixed : - The sFlow dissector could go into an infinite loop. wnpa-sec-2012-32 CVE-2012-6054: The SCTP dissector could go into an infinite loop. wnpa-sec-2012-33 CVE-2012-6056: The MS-MMS dissector could crash...
Debian DSA-2644-1 : wireshark - several vulnerabilities
Multiple vulnerabilities were discovered in the dissectors for the MS-MMS, RTPS, RTPS2, Mount, ACN, CIMD and DTLS protocols, which could result in denial of service or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Wireshark 1.8.x < 1.8.6 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 1.8.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.6 advisory. - The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset...
Wireshark Multiple Dissector Multiple DoS Vulnerabilities - March 13 (Mac OS X)
This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnmar13macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Wireshark Multiple Dissector Multiple DoS Vulnerabilities - March 13 Mac OS X Authors: Arun...
Integer overflow
The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...
CVE-2013-2478
The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...
UBUNTU-CVE-2013-2478
The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...
CVE-2013-2478
The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...
CVE-2013-2478
The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...
CVE-2013-2478
The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...
CVE-2013-2478
CVE-2013-2478 concerns the MS-MMS dissector in Wireshark, where epan/dissectors/packet-ms-mms.c mishandles string lengths, allowing a remote attacker to crash the application (denial of service) via a malformed packet that overflows an integer or contains embedded NULLs. The issue affects Wiresha...
CVE-2013-2478: Undefined Security Weakness
The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...
PT-2013-3811
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue arises from the dissect server info function in the MS-MMS dissector, which does not properly manage string lengths. This allows remote...