19 matches found
EUVD-2020-28178
Malware in sbrugna...
SUSE CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
PT-2020-22215
Name of the Vulnerable Software and Affected Versions Wireshark affected versions not specified Description The issue is related to a global buffer overflow read of 8 bytes. Technical details about the crash state indicate involvement of the dissect wassp sub tlv and dissect wassp tlv functions. ...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
Wireshark 3.2.x < 3.2.1 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.1. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.1 advisory. - In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in...
Wireshark 3.2.x < 3.2.1 A Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 3.2.1. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.1 advisory. - In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by...
Wireshark Buffer Overflow Vulnerability (CNVD-2020-03533)
Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A buffer overflow vulnerability exists in dissectwasspsubtlv in version 3.2.x prior to...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
Code injection
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
CVE-2020-7044
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
CVE-2020-7044
Wireshark WASSP dissector in 3.2.x could crash due to an off-by-one handling in packet-wassp.c. The fix, applied in 3.2.1, uses safer comparisons (>= and
CVE-2020-7044: Out-of-bounds Read
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...
KLA11645 Multiple vulnerabilities in Wireshark
Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in WASSP dissector can be exploited remotely via specially designed packet. 2. Denial of...
PT-2020-5747
Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.2.x through 3.2.0 Description: The issue is related to the incorrect neutralization of special elements in the output of the WASSP traffic analyzer, which could allow a remote attacker to cause a denial of service. The...