12 matches found
wireshark: Ptvcursor crash (wnpa-sec-2015-28)
The ptvcursoradd function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attackers to cause a denial of service application crash via a crafted packet...
SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2015:1713-1)
Wireshark has been updated to 1.12.7. FATE319388 The following vulnerabilities have been fixed : - Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241 - Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242 - Wireshark could cras...
[SECURITY] [DSA 3367-1] wireshark security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3367-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 24, 2015 https://www.debian.org/security/faq -...
DSA-3367-1 wireshark - security update
Bulletin has no description...
Debian Security Advisory DSA 3367-1 (wireshark - security update)
Multiple vulnerabilities were discovered in the dissectors/parsers for ZigBee, GSM RLC/MAC, WaveAgent, ptvcursor, OpenFlow, WCCP and in internal functions which could result in denial of service. OpenVAS Vulnerability Test $Id: deb3367.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from...
Debian: Security Advisory (DSA-3367-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : wireshark -- multiple vulnerabilities (9bdd8eb5-564a-11e5-9ad8-14dae9d210b8)
Wireshark development team reports : The following vulnerabilities have been fixed. - wnpa-sec-2015-21 Protocol tree crash. Bug 11309 - wnpa-sec-2015-22 Memory manager crash. Bug 11373 - wnpa-sec-2015-23 Dissector table crash. Bug 11381 - wnpa-sec-2015-24 ZigBee crash. Bug 11389 - wnpa-sec-2015-2...
Wireshark Ptvcursor Denial of Service Vulnerability
Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. Wireshark Ptvcursor suffers from a denial of service vulnerability. Allows a remote attacker to cause a denial of service via a carefully crafted packet...
UBUNTU-CVE-2015-6248
The ptvcursoradd function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attackers to cause a denial of service application crash via a crafted packet...
Wireshark Illegal Ptvcursor Length Check Denial of Service Vulnerability
Wireshark is an open source protocol analysis program. Wireshark handles illegal Ptvcursor lengths with a security vulnerability that allows an attacker to exploit the vulnerability by submitting special messages to be parsed to crash the application...
wireshark -- multiple vulnerabilities
Wireshark development team reports: The following vulnerabilities have been fixed. wnpa-sec-2015-21 Protocol tree crash. Bug 11309 wnpa-sec-2015-22 Memory manager crash. Bug 11373 wnpa-sec-2015-23 Dissector table crash. Bug 11381 wnpa-sec-2015-24 ZigBee crash. Bug 11389 wnpa-sec-2015-25 GSM RLC/M...
PT-2015-7137
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.6 Description The issue is related to the ptvcursor add function in the ptvcursor implementation, which does not check if the expected amount of data is available. This allows remote attackers to cause a...