Wireshark@1.0.0 Security Vulnerabilities and Issues — Wireshark@1.0.0 CVE List

Lucene search

WiresharkWireshark1.0.0

47 matches found

CVE•added 2011/03/03 1:0 a.m.•139 views

CVE-2011-1140

Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less...

4.3CVSS6.5AI score0.30766EPSS

CVE•added 2010/06/15 2:4 p.m.•81 views

CVE-2010-2287

Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.

8.3CVSS6.6AI score0.03044EPSS

CVE•added 2010/06/15 2:4 p.m.•71 views

CVE-2010-2286

The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.

3.3CVSS6.2AI score0.01015EPSS

CVE•added 2009/07/21 5:30 p.m.•68 views

CVE-2009-2562

Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service (crash) via unknown vectors.

5CVSS6.2AI score0.01851EPSS

CVE•added 2008/09/04 7:41 p.m.•67 views

CVE-2008-3933

Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function.

3.3CVSS5.8AI score0.0017EPSS

CVE•added 2010/02/03 6:30 p.m.•67 views

CVE-2010-0304

Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.

7.5CVSS6.7AI score0.77116EPSS

CVE•added 2010/06/15 2:4 p.m.•67 views

CVE-2010-2283

The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.

3.3CVSS6.2AI score0.01015EPSS

CVE•added 2009/05/29 10:30 p.m.•66 views

CVE-2009-1829

Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (crash) via crafted PCNFSD packets.

5CVSS6.2AI score0.0242EPSS

CVE•added 2010/06/15 2:4 p.m.•66 views

CVE-2010-2284

Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.

8.3CVSS6.6AI score0.03044EPSS

CVE•added 2008/10/22 6:0 p.m.•64 views

CVE-2008-4685

Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.

5CVSS6.2AI score0.01097EPSS

CVE•added 2009/12/21 9:30 p.m.•64 views

CVE-2009-4377

The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.

4.3CVSS6AI score0.0151EPSS

CVE•added 2010/08/26 6:36 p.m.•64 views

CVE-2010-3133

Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse airpcap.dll, and possibly other DLLs, that is located in the same folder a...

9.3CVSS7.4AI score0.00726EPSS

CVE•added 2009/04/13 4:30 p.m.•63 views

CVE-2009-1268

The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet.

4.3CVSS6.2AI score0.01334EPSS

CVE•added 2010/08/13 6:43 p.m.•62 views

CVE-2010-2994

Stack-based buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.14 and 1.2.0 through 1.2.9 has unknown impact and remote attack vectors. NOTE: this issue exists because of a CVE-2010-2284 regression.

10CVSS6.8AI score0.03044EPSS

CVE•added 2008/07/10 11:41 p.m.•61 views

CVE-2008-3137

The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.

4.3CVSS6.1AI score0.02919EPSS

CVE•added 2008/10/22 6:0 p.m.•61 views

CVE-2008-4683

The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvb_memcpy call.

5CVSS6.1AI score0.03328EPSS

CVE•added 2009/02/16 8:30 p.m.•61 views

CVE-2009-0599

Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file.

5CVSS6.4AI score0.02272EPSS

CVE•added 2011/03/03 1:0 a.m.•61 views

CVE-2011-1143

epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.

4.3CVSS6.1AI score0.12771EPSS

CVE•added 2010/05/12 11:46 a.m.•60 views

CVE-2010-1455

The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.

4.3CVSS6.2AI score0.00958EPSS

CVE•added 2008/10/22 6:0 p.m.•59 views

CVE-2008-4684

packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets, as demonstrated by enabling the (1) PRP or (2) MATE post dissector.

4.3CVSS6.1AI score0.01047EPSS

CVE•added 2009/02/16 8:30 p.m.•59 views

CVE-2009-0600

Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame.

4.3CVSS6.2AI score0.02919EPSS

CVE•added 2010/06/15 2:4 p.m.•59 views

CVE-2010-2285

The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.

3.3CVSS6.3AI score0.00494EPSS

CVE•added 2010/08/13 6:43 p.m.•59 views

CVE-2010-2995

The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffe...

10CVSS7.8AI score0.06637EPSS

CVE•added 2008/07/10 11:41 p.m.•58 views

CVE-2008-3141

Unspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0.0 allows remote attackers to read system memory via unspecified vectors.

4.9CVSS6.1AI score0.00127EPSS

CVE•added 2011/03/03 1:0 a.m.•58 views

CVE-2011-1141

epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (memory consumption) via (1) a long LDAP filter string or (2) an LDAP filter string containing many elements.

4.3CVSS6.3AI score0.0188EPSS

CVE•added 2009/04/01 10:30 a.m.•57 views

CVE-2009-1210

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.

10CVSS7.4AI score0.34474EPSS

CVE•added 2009/10/30 8:30 p.m.•57 views

CVE-2009-3550

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party inform...

4.3CVSS6.1AI score0.01733EPSS

CVE•added 2009/10/30 8:30 p.m.•57 views

CVE-2009-3829

Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an "unsigned integer wrap vulnerability."

9.3CVSS7.5AI score0.05591EPSS

CVE•added 2008/07/10 11:41 p.m.•56 views

CVE-2008-3140

The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."

5CVSS6.3AI score0.053EPSS

CVE•added 2008/07/16 6:41 p.m.•55 views

CVE-2008-3145

The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.

5CVSS6.3AI score0.0242EPSS

CVE•added 2008/07/10 11:41 p.m.•54 views

CVE-2008-3138

The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.

5CVSS6.1AI score0.01004EPSS

CVE•added 2009/07/21 5:30 p.m.•54 views

CVE-2009-2560

Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIU...

5CVSS6.6AI score0.02685EPSS

CVE•added 2008/10/22 6:0 p.m.•53 views

CVE-2008-4682

wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an "unknown/unexpected packet type" that triggers a failed assertion.

5CVSS6.1AI score0.05613EPSS

CVE•added 2009/04/13 4:30 p.m.•53 views

CVE-2009-1269

Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.

5CVSS6.1AI score0.01398EPSS

CVE•added 2008/09/02 2:24 p.m.•52 views

CVE-2008-3146

Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.

10CVSS7.2AI score0.02345EPSS

CVE•added 2008/09/04 7:41 p.m.•52 views

CVE-2008-3932

Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service (hang) via a crafted NCP packet that triggers an infinite loop.

5CVSS5.9AI score0.0073EPSS

CVE•added 2008/12/01 3:30 p.m.•52 views

CVE-2008-5285

Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop.

5CVSS6.1AI score0.0242EPSS

CVE•added 2009/04/21 3:30 p.m.•51 views

CVE-2009-1266

Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors.

10CVSS6.3AI score0.00447EPSS

CVE•added 2009/09/18 10:30 a.m.•51 views

CVE-2009-3241

Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.

7.8CVSS5.5AI score0.06188EPSS

CVE•added 2011/03/28 4:55 p.m.•49 views

CVE-2011-0024

Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted capture file.

9.3CVSS8.1AI score0.01168EPSS

CVE•added 2009/03/14 6:30 p.m.•47 views

CVE-2008-6472

The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.

4.3CVSS6.4AI score0.00606EPSS

CVE•added 2009/04/13 4:30 p.m.•47 views

CVE-2009-1267

Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause a denial of service (crash) via unknown attack vectors.

5CVSS6.3AI score0.01029EPSS

CVE•added 2008/09/04 7:41 p.m.•46 views

CVE-2008-3934

Unspecified vulnerability in Wireshark (formerly Ethereal) 0.99.6 through 1.0.2 allows attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.

3.3CVSS5.8AI score0.0017EPSS

CVE•added 2009/02/16 8:30 p.m.•46 views

CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable.

2.1CVSS5.9AI score0.00044EPSS

CVE•added 2008/07/10 11:41 p.m.•44 views

CVE-2008-3139

The RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: this might be due to a use-after-free error.

5CVSS6.2AI score0.01332EPSS

CVE•added 2008/10/22 6:0 p.m.•44 views

CVE-2008-4680

packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a malformed USB Request Block (URB).

4.3CVSS6.2AI score0.0384EPSS

CVE•added 2008/10/22 6:0 p.m.•43 views

CVE-2008-4681

Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via unknown packets.

4.3CVSS6.2AI score0.01047EPSS