CVE-2016-6512

epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvbgetguintvar function, which allows remote attackers to cause a denial of service infinite loop via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors...

CVE-2016-6513

Wireshark WBXML dissector (epan/dissectors/packet-wbxml.c) is vulnerable in Wireshark 2.x up to before 2.0.5 due to unbounded recursion depth. A crafted packet can trigger excessive recursion, causing an application crash (DoS). The CVE is CVE-2016-6513. Remediation: upgrade Wireshark to version ...

CVE-2016-6512

epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvbgetguintvar function, which allows remote attackers to cause a denial of service infinite loop via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors...

CVE-2016-6513

epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-6513: Undefined Security Weakness

epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Wireshark 2.0.0 < 2.0.4 - MMSE / WAP / WBXML / WSP Dissectors Denial of Service

Build Information: TShark Wireshark 2.0.2 SVN Rev Unknown from unknown Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A...

PT-2016-6967

Name of the Vulnerable Software and Affected Versions Wireshark versions prior to 2.0.5 Description The issue is related to the omission of an overflow check in the tvb get guintvar function in the epan/dissectors/packet-wap.c file. This allows remote attackers to cause a denial of service,...

Wireshark 2.0.0 2.0.4 - MMSE WAP WBXML WSP Dissectors Denial of Service

Wireshark 2.0.0 2.0.4 - MMSE WAP WBXML WSP Dissectors Denial of Service Build Information: TShark Wireshark 2.0.2 SVN Rev Unknown from unknown Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions...

PT-2016-6968

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.4 Description The issue is related to the WBXML dissector in Wireshark, where the recursion depth is not restricted, allowing remote attackers to cause a denial of service by crashing the application via a...

CVE-2016-6513

epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service application crash via a crafted packet...

DSA-3615-1 wireshark - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3615-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark 1.12.x < 1.12.12 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.12.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.12 advisory. - epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets,...

Updated wireshark packages fix security vulnerability

Updated wireshark packages fix security vulnerabilities: The SPOOLS dissector could go into an infinite loop CVE-2016-5350. The IEEE 802.11 dissector could crash CVE-2016-5351. The IEEE 802.11 dissector could crash CVE-2016-5352. The UMTS FP dissector could crash CVE-2016-5353. Some USB dissector...

Wireshark WBXML Parser Integer Overflow Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. An integer overflow vulnerability exists in the 'parsewbxmltagdefined' function in...

CVE-2016-5359

epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a crafted packet...

PT-2016-6389

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.11 Description The issue is related to the WBXML dissector in Wireshark, where it mishandles offsets. This can be exploited by remote attackers to cause a denial of service through an integer overflow and...

CentOS 3 / 4 : wireshark (CESA-2006:0726)

New Wireshark packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Several flaws were found in Wireshark's HTTP, WBXML, LDAP...

Fedora Update for wbxml2 FEDORA-2008-0680

Check for the Version of wbxml2 OpenVAS Vulnerability Test Fedora Update for wbxml2 FEDORA-2008-0680 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 8 Update: wbxml2-0.9.2-12.fc8

The WBXML Library libwbxml contains a library and its associated tools to parse, encode and handle WBXML documents. The WBXML format is a binary representation of XML, defined by the Wap Forum, and used to reduce bandwidth in mobile communications...