Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2017-7700

wireshark: NetScaler file parser infinite loop (wnpa-sec-2017-14)

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-7701

wireshark: BGP dissector infinite loop (wnpa-sec-2017-16)

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-7705

wireshark: RPCoRDMA dissector infinite loop (wnpa-sec-2017-15)

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-6472

wireshark: RTMPT dissector infinite loop (wnpa-sec-2017-04)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6473

wireshark: K12 file parser crash (wnpa-sec-2017-09)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6471

wireshark: WSP infinite loop (wnpa-sec-2017-05)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6474

wireshark: NetScaler file parser infinite loop (wnpa-sec-2017-07)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-7745

wireshark: SIGCOMP dissector infinite loop (wnpa-sec-2017-20)

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-9352

wireshark: Bazaar dissector infinite loop (wnpa-sec-2017-22)

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by ensuring that backwards parsing cannot occur.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-6014

wireshark: Memory exhaustion/infinite loop via malformed STANAG 4607 capture file

In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-5597

wireshark: DHCPv6 large loop (wnpa-sec-2017-02)

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-6467

wireshark: Netscaler file parser infinite loop (wnpa-sec-2017-11)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-17997

wireshark: Misuse of NULL pointer in MRDISC dissector

In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-5596

wireshark: ASTERIX infinite loop (wnpa-sec-2017-01)

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-6468

wireshark: NetScaler file parser crash (wnpa-sec-2017-08)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-17084

wireshark: IWARP_MPA dissector crash

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-17085

wireshark: CIP Safety dissector crash

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.

CVSS 3.0 · 7.5 High EPSS 16.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-15193

wireshark: MBIM dissector crash

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-17083

wireshark: NetBIOS dissector crash

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-17935

Wireshark: denial of service in the File_read_line function in epan/wslua/wslua_file.c

The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark