4 matches found
ROS-20261109-73-0157
The vulnerability in the spdyassembledataframes function epan/dissectors/packet-spdy.c within the Wireshark traffic analyzer is related to buffer overflow. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code or cause a denial of service...
Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2026-3252)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3252 advisory. TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service CVE-2026-95386 The spdyassembledataframes function in epan/dissectors/packet-spdy.c accumulates SPDY DATA frame payload...
Important: wireshark
Issue Overview: TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service CVE-2026-95386 The spdyassembledataframes function in epan/dissectors/packet-spdy.c accumulates SPDY DATA frame payload fragment lengths into a uint32t variable named datalen without any overflow protection...
Wireshark spdy_assemble_data_frames Heap Buffer Overflow DoS
The vulnerability of the spdyassembledataframes function epan/dissectors/packet-spdy.c in the Wireshark network traffic analyzer is related to the execution of operations outside the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...