Updated wireshark package fixes security vulnerabilities

The Bluetooth SDP dissector could go into a large loop CVE-2013-4927. The DIS dissector could go into a large loop CVE-2013-4929. The DVB-CI dissector could crash CVE-2013-4930. The GSM RR dissector and possibly others could go into a large loop CVE-2013-4931. The GSM A Common dissector could cra...

Wireshark 1.8.x < 1.8.9 Multiple Vulnerabilities

The installed version of Wireshark 1.8 is earlier than 1.8.9. It is, therefore, affected by denial of service vulnerabilities in the following dissectors : - ASN.1 PER Bug 8722 - Bluetooth SDP Bug 8831 - DIS Bug 8911 - DVB-CI Bug 8916 - GSM A Common Bug 8940 - GSM RR Bug 8923 - Netmon file parser...

ldns (CVE-2011-3581) (important)

A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581...

Wireshark 1.4.9 & Wireshark 1.6.2 updated version released

Wireshark 1.4.9 & Wireshark 1.6.2 updated version released Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. The following bugs have been fixed: configure ignores partially LDFLAGS. Bug 5607 Build fails when it...

CVE-2010-2992

packet-gsmarr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service crash via unknown vectors that trigger a NULL pointer dereference...

DEBIAN-CVE-2010-2992

packet-gsmarr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service crash via unknown vectors that trigger a NULL pointer dereference...

CVE-2010-2992

packet-gsmarr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service crash via unknown vectors that trigger a NULL pointer dereference...

CVE-2010-2992

CVE-2010-2992 affects Wireshark’s GSM A RR dissector. The vulnerability exists in the GSM A RR parser (packet-gsm_a_rr.c) due to a NULL pointer dereference, allowing a remote attacker to cause a crash (denial of service) when processing crafted packets. The scope in the initial description covers...

Wireshark / Ethereal < 1.0.15 / 1.2.10 Multiple Vulnerabilities

The installed version of Wireshark or Ethereal is potentially affected by multiple vulnerabilities. - The SigComp Universal Decompressor Virtual Machine could potentially overflow a buffer. Bug 4867 - The ANS.1 BER dissector could potentially exhaust the stack memory. Bug 4984 - The GSM A RR...

GLSA-200911-05 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200911-05 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark: Ryan Giobbi reported an integer overflow in wiretap/erf.c CVE-2009-3829. The vendor reported multiple unspecified...

Wireshark Multiple Denial of Service Vulnerabilities (Windows)

This host is installed with Wireshark and is prone to multiple Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwiresharkmultdosvulnwin.nasl 5148 2017-01-31 13:16:55Z teissa $ Wireshark Multiple Denial of Service Vulnerabilities Windows Authors: Antu Sanadi Copyright:...

Wireshark Multiple Denial of Service Vulnerabilities - Windows

Wireshark is prone to multiple Denial of Service vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure...

CVE-2009-3242

Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure...

CVE-2009-3242

CVE-2009-3242 affects Wireshark, specifically the GSM A RR dissector in version 1.2.0 and 1.2.1. The issue is described as an uninitialized dissector handle in packet.c that triggers an assertion failure, leading to an application crash (DoS). Connected sources (e.g., GLSA 200911-05 and Fedora ad...

Wireshark 1.2.1 - GSM A RR Dissector packet.c Remote Denial of Service

source: https://www.securityfocus.com/bid/36408/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to crash the application and deny service to legitimate users. These issues affect Wireshark 0.99.6 through 1.2.1...

[SECURITY] [DSA 1795-1] New ldns packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1795 [email protected] http://www.debian.org/security/ Devin Carraway May 07, 2009 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2007-6341

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...

CVE-2007-6341

CVE-2007-6341 affects Net::DNS (Net::DNS perl module) in version 0.60 build 654, used by SpamAssassin and OTRS. A crafted DNS response can cause a remote DoS (process crash croak). Public references show Debian/Ubuntu patches and advisories updating libnet-dns-perl to fixed releases (e.g., DSA-15...

Perl Net::DNS DNS应答远程拒绝服务漏洞

BUGTRAQ ID: 26902 CVE ID：CVE-2007-6341 Perl Net::DNS是一款使用Perl实现的DNS解析应用程序。 Perl Net::DNS不正确处理畸形应答请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于Net/DNS/RR/A.pm： if $self-"rdlength" 0 $self-"address" = inetntoasubstr$$data, $offset, 4; 由于在使用substr时不正确验证$$data有4字节可读，可导致数据发送给inetntoa不足够而导致触发如下代码： ipaddress =...