4 matches found
SUSE CVE-2018-7421
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification...
DEBIAN-CVE-2017-15191
In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length...
CVE-2017-15191
CVE-2017-15191 affects Wireshark 2.0.0–2.4.1 (including 2.2.0–2.2.9 and 2.4.0–2.4.1). The DMP dissector contains a length-check flaw in 7‑bit string handling that can cause an application crash when processing malformed packets, potentially enabling a denial of service. The issue has been fixed u...
Wireshark WCP parser 'epan/dissectors/packet-dmp.c' denial of service vulnerability
Wireshark is the most popular network protocol parser. A remote denial of service vulnerability exists in the WCP parser in Wireshark versions 1.12.0-1.12.4, 1.10.0-1.10.13. An attacker could exploit this vulnerability to exhaust CPU resources and launch a denial of service attack...