CVE-2017-9345

wireshark: DNS dissector infinite loop (wnpa-sec-2017-26)

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-7957

wireshark: Bluetooth L2CAP dissector crash

In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-byte memcmp for potentially shorter strings.

CVSS 3.0 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-7958

wireshark: NCP dissector crash

In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-24478

wireshark: integer overflow in dissect_bgp_open() in epan/dissectors/packet-bgp.c

An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-9375

wireshark: DTN infinite loop (wnpa-sec-2016-62)

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful.

CVSS 3.0 · 5.9 Medium EPSS 1.6% KEV · Not listed

Vendors

Debian Wireshark

Products

Debian Linux Wireshark

CVE-2016-9376

wireshark: OpenFlow crash (wnpa-sec-2016-60)

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.

CVSS 3.0 · 5.9 Medium EPSS 1.6% KEV · Not listed

Vendors

Debian Wireshark

Products

Debian Linux Wireshark

CVE-2016-9374

wireshark: AllJoyn crash (wnpa-sec-2016-59)

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.

CVSS 3.0 · 5.9 Medium EPSS 1.6% KEV · Not listed

Vendors

Debian Wireshark

Products

Debian Linux Wireshark

CVE-2016-7178

wireshark: UMTS FP dissector crash

epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.3% KEV · Not listed

Vendors

Debian Wireshark

Products

Debian Linux Wireshark

CVE-2016-7177

wireshark: Catapult DCT2000 dissector crash

epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.3% KEV · Not listed

Vendors

Debian Wireshark

Products

Debian Linux Wireshark

CVE-2016-7179

wireshark: Catapult DCT2000 dissector crash

Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.7% KEV · Not listed

Vendors

Debian Wireshark

Products

Debian Linux Wireshark

CVE-2016-7175

wireshark: QNX6 QNET dissector crash

epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 1.3% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-7176

wireshark: H.225 dissector crash

epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.5% KEV · Not listed

Vendors

Debian Wireshark

Products

Debian Linux Wireshark

CVE-2016-7180

wireshark: IPMI Trace dissector crash

epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.1% KEV · Not listed

Vendors

Debian Wireshark

Products

Debian Linux Wireshark

CVE-2016-6511

wireshark: OpenFlow long loop (wnpa-sec-2016-47)

epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-6512

wireshark: MMSE, WAP, WBXML, and WSP infinite loop. (wnpa-sec-2016-48)

epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors.

CVSS 3.0 · 5.9 Medium EPSS 7.6% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-6509

wireshark: LDSS dissector crash (wnpa-sec-2016-45)

epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-6510

wireshark: RLC dissector crash (wnpa-sec-2016-46)

Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.3% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-6513

wireshark: WBXML crash (wnpa-sec-2016-49)

epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-6505

wireshark: PacketBB crash (wnpa-sec-2016-41)

epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 7.7% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2016-6506

wireshark: WSP infinite loop (wnpa-sec-2016-42)

epan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 3.0 · 5.9 Medium EPSS 2.2% KEV · Not listed

Vendors

Wireshark

Products

Wireshark