SUSE CVE-2013-4929

The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service loop via a crafted...

OSV-2020-1152 Heap-buffer-overflow in pcpp::tbp_my_own_strnlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22483 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::tbpmyownstrnlen pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields...

OSV-2020-973 Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22837 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...

OSV-2020-943 Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22528 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...

PT-2020-22639

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the pcpp::HeaderField::HeaderField function, which is called by...

PT-2020-22653

Name of the Vulnerable Software and Affected Versions No specific software or version information is provided in the given input. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the pcpp::HeaderField::HeaderField function, which is called by...

PT-2020-21731

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the pcpp::tbp my own strnlen, pcpp::HeaderField::HeaderField, and...

OSV-2020-45 Use-of-uninitialized-value in pcpp::tbp_my_own_strnlen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22829 Crash type: Use-of-uninitialized-value Crash state: pcpp::tbpmyownstrnlen pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields...

PT-2020-22333

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pcpp::tbp my own strnlen function, which is called by...

DEBIAN-CVE-2013-4929

The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service loop via a crafted...

CVE-2013-4929: Undefined Security Weakness

The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service loop via a crafted...

PT-2013-5277

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the parseFields function in the DIS dissector, which does not properly terminate packet-data processing after finding zero...