Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2017-17083

wireshark: NetBIOS dissector crash

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-17084

wireshark: IWARP_MPA dissector crash

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-5596

wireshark: ASTERIX infinite loop (wnpa-sec-2017-01)

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-15191

wireshark: DMP dissector crash

In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-15192

wireshark: BT ATT dissector crash

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-15189

wireshark: DOCSIS infinite loop

In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by adding decrements.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-15190

wireshark: RTSP dissector crash

In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash. This was addressed in epan/dissectors/packet-rtsp.c by correcting the scope of a variable.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-15193

wireshark: MBIM dissector crash

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-5597

wireshark: DHCPv6 large loop (wnpa-sec-2017-02)

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-13764

wireshark: Modbus dissector crash (wnpa-sec-2017-40)

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.

CVSS 3.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-11411

wireshark: openSAFETY dissector memory exhaustion (wnpa-sec-2017-28)

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350.

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-13765

wireshark: IrCOMM dissector buffer overrun (wnpa-sec-2017-41)

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation.

CVSS 3.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-11409

wireshark: GPRS LLC dissector large loop. (wnpa-sec-2017-37)

In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type.

CVSS 3.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-11410

wireshark: WBXML dissector infinite loop (wnpa-sec-2017-13)

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702.

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-13766

wireshark: Profinet I/O buffer overrun (wnpa-sec-2017-39)

In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-11406

wireshark: DOCSIS infinite loop (wnpa-sec-2017-36)

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-11407

wireshark: MQ dissector crash (wnpa-sec-2017-35)

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-11408

wireshark: AMQP dissector crash (wnpa-sec-2017-34)

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-13767

wireshark: MSDP dissector infinite loop (wnpa-sec-2017-38)

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-6014

wireshark: Memory exhaustion/infinite loop via malformed STANAG 4607 capture file

In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark