180 matches found
CVE-2015-8742
The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...
CVE-2015-8742: Improper Input Validation
The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...
Wireshark MS-WSP Parser Denial of Service Vulnerability
Wireshark is a suite of network packet analysis software. A denial of service vulnerability exists in the Wireshark MS-WSP parser. Because the dissectCPMSetBindings function in the epan/dissectors/packet-mswsp.c file does not validate the size of the columns, it allows remote attackers to cause a...
PT-2016-3990
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.1 Description The issue is related to the dissect CPMSetBindings function in the MS-WSP dissector, which does not validate the column size. This allows remote attackers to cause a denial of service, resulti...
CVE-2014-0669
The Wireless Session Protocol WSP feature in the Gateway GPRS Support Node GGSN component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371...
CVE-2014-0669
Cisco ASR 5000 Series Gateway GPRS Support Node (GGSN) vulnerability: the Wireless Session Protocol (WSP) mis-processes certain WSP packets, allowing an unauthenticated, remote attacker to bypass Top‑Up payment restrictions (browse without charging). Root cause: incorrect handling of WSP packets....
CVE-2005-3249
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer...
CVE-2005-3249
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer...
CVE-2005-3249
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer...
CVE-2005-3249
CVE-2005-3249 affects Ethereal up to version 0.10.12 (vulnerability in the WSP dissector). The root cause described in connected MDKSA-2005:193-2 is that the WSP dissector could free an invalid pointer, enabling a remote attacker to cause a denial of service or memory corruption. A patched versio...
CVE-2005-3249: Undefined Security Weakness
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer...
security flaw
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer...
Fedora Core 4 : ethereal-0.10.13-1.FC4.2 (2005-1011)
Ethereal 0.10.13 fixes the following issues : The ISAKMP dissector could exhaust system memory. CVE-2005-3241 Fixed in: r15163 Bug IDs: none Versions affected: 0.10.11 to 0.10.12. The FC-FCS dissector could exhaust system memory. CVE-2005-3241 Fixed in: r15204 Bug IDs: 312 Versions affected: 0.9....
CVE-2005-1459
Ethereal (now Wireshark) has multiple remote‑code-execution/denial of service vulnerabilities in its dissectors (WSP, BER, SMB, NDPS, IAX2, RADIUS, TCAP, MRDISC, 802.3 Slow, SMBMailslot, SMB PIPE) prior to version 0.10.11. The CVE set CVE-2005-1456 through CVE-2005-1470 is cited for these issues....
CVE-2005-1468
CVE-2005-1468 affects Ethereal (before 0.10.11) where multiple dissectors (including WSP, Q.931, H.245, KINK, MGCP, RPC, SMBMailslot, SMB NETLOGON, and others) may crash the analyzer via crafted network traffic, causing a denial of service due to a null dereference. Multiple advisories (RHSA-2005...
CVE-2005-1468: Undefined Security Weakness
Multiple unknown vulnerabilities in the 1 WSP, 2 Q.931, 3 H.245, 4 KINK, 5 MGCP, 6 RPC, 7 SMBMailslot, and 8 SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash via unknown vectors that lead to a null dereference...
CVE-2005-1459: Undefined Security Weakness
Multiple unknown vulnerabilities in the 1 WSP, 2 BER, 3 SMB, 4 NDPS, 5 IAX2, 6 RADIUS, 7 TCAP, 8 MRDISC, 9 802.3 Slow, 10 SMBMailslot, or 11 SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error...
CVE-2003-0432
Ethereal (WinZip packet analyzer) 0.9.12 and earlier is affected by multiple string-handling weaknesses in several dissectors (BGP, WTP, DNS, 802.11, ISAKMP, WSP, CLNP, ISIS, RMI). The CVE-2003-0432 issue arises from improper handling of certain strings, contributing to potential memory consumpti...
CVE-2003-0432
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...
CVE-2003-0432: Undefined Security Weakness
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...