PT-2016-5185

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.x through 2.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in a stack-based buffer overflow and application crash, via a crafted file. This is due to the wiretap/nettrace 3gpp 3...

wireshark-cli: denial of service

CVE-2015-8742 denial of service The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a...

DEBIAN-CVE-2015-8733

The ngsnifferprocessrecord function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service...

Out-of-bounds

wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme MCS data, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file...

CVE-2015-8733

CVE-2015-8733 affects the Wireshark dissector for Sniffer (wiretap/ngsniffer.c). The vulnerability arises because ngsniffer_process_record does not validate the relationship between the record length and the header length, enabling a crafted file to trigger an out-of-bounds read and crash the app...

CVE-2015-8737: Improper Input Validation

The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...

CVE-2015-3906

The logcatdumptext function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly handle a lack of \0 termination, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted message in a...

PT-2015-6342

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.4 Description The issue arises from the logcat dump text function in wiretap/logcat.c, which is part of the Android Logcat file parser in Wireshark. This function does not properly handle a lack of 0...

CVE-2015-2189

Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 are affected by CVE-2015-2189 due to an off-by-one error in pcapng_read in wiretap/pcapng.c. This causes an out-of-bounds read and potential denial of service when processing crafted packets with an invalid Interface Statistics Block (ISB) ...

wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a denial of service application crash via a crafted file...

wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service application crash via a crafted file that triggers writes of uncompressed bytes...

UBUNTU-CVE-2014-6431

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service application crash via a crafted file that triggers writes of uncompressed bytes...

CVE-2014-6430

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a denial of service application crash via a crafted file...

CVE-2014-6431

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service application crash via a crafted file that triggers writes of uncompressed bytes...

CVE-2014-6430: Improper Input Validation

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a denial of service application crash via a crafted file...

CVE-2014-6431: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service application crash via a crafted file that triggers writes of uncompressed bytes...

CVE-2014-6429: Improper Input Validation

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allows remote attackers to cause a denial of service application crash via a crafted file...

CVE-2014-6432: Undefined Security Weakness

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operations, which allows remote attackers to cause a denial of service application crash via a crafted file...

PT-2014-1759

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.8 Description The issue exists in the read new line function in wiretap/catapult dct2000.c of the Catapult DCT2000 dissector in Wireshark due to incorrect handling of ' ' and 'r' characters. This allows...

Wireshark <= 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer Overflow

No description provided by source. Exploit Title: Wireshark 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer Overflow Date: 24/04/2014 Exploit Author: j0sm1 Vendor Homepage: www.wireshark.org Software Link: http://wireshark.askapache.com/download/win32/all-versions/ Version: 1.8.12/1.10.5 Tested on:...