CVE-2018-9261: Excessive Iteration

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs...

wireshark-cli: denial of service

CVE-2015-8742 denial of service The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a...

CVE-2015-8711: Improper Input Validation

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

CVE-2015-8730: Improper Input Validation

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers to cause a denial of service invalid read operation and application crash via a crafted packet...

CVE-2013-5718

The dissectnbapTdCHID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dchid value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-5718: Undefined Security Weakness

The dissectnbapTdCHID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dchid value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4077

Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service application crash via a crafted packet, related to nbap.cnf and packet-nbap.c...

CVE-2013-4077: Improper Restriction of Operations within the Bounds of a Memory Buffer

Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service application crash via a crafted packet, related to nbap.cnf and packet-nbap.c...

PT-2013-4837

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.7 Description The issue is related to an array index error in the NBAP dissector, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. This is achieved...