CVE-2016-9376

wireshark: OpenFlow crash (wnpa-sec-2016-60)

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.

CVSS 3.0 · 5.9 Medium EPSS 1.6% KEV · Not listed

Vendors

Debian Wireshark

Products

Debian Linux Wireshark

CVE-2010-0304

wireshark: crash in LWRES dissector

Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.

CVSS 2.0 · 7.5 High EPSS 74.1% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2013-4081

wireshark: DoS (infinite loop) in the HTTP dissector (wnpa-sec-2013-39)

The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause a denial of service (stack consumption) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed

Vendors

Debian Opensuse Redhat and 1 more

Products

Debian Linux Opensuse Enterprise Linux and 1 more

CVE-2013-4080

wireshark: DoS (infinite loop, CPU & memory consumption) in the Assa Abloy R3 dissector (wnpa-sec-2013-38)

The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.8 does not properly handle a zero-length item, which allows remote attackers to cause a denial of service (infinite loop, and CPU and memory consumption) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2013-4079

wireshark: DoS (infinite loop, application hang) in the GSM CBCH dissector (wnpa-sec-2013-37)

The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (infinite loop and application hang) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed

Vendors

Opensuse Wireshark

Products

Opensuse Wireshark

CVE-2013-4078

wireshark: DoS (infinite loop) in the RDP dissector (wnpa-sec-2013-36)

epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-4077

wireshark: Array index error in the NBAP dissector (wnpa-sec-2013-35)

Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-4076

wireshark: Invalid free in the PPP dissector (wnpa-sec-2013-34)

Buffer overflow in the dissect_iphc_crtp_fh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.6% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-4075

wireshark: DoS (crash) in the GMR-1 BCCH dissector (wnpa-sec-2013-33)

epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed

Vendors

Debian Opensuse Redhat and 1 more

Products

Debian Linux Opensuse Enterprise Linux and 1 more

CVE-2013-4074

wireshark: DoS (crash) in the CAPWAP dissector (wnpa-sec-2013-32)

The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 60.6% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-3562

wireshark: DoS (stack overflow, crash) in the Websocket dissector (wnpa-sec-2013-29, upstream #8448, #8499)

Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-3561

wireshark: Multiple Denial of Service flaws

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.

CVSS 2.0 · 7.8 High EPSS 2.4% KEV · Not listed

Vendors

Debian Opensuse Redhat and 1 more

Products

Debian Linux Opensuse Enterprise Linux and 1 more

CVE-2013-3560

wireshark: DoS (crash) in the MPEG DSM-CC dissector (wnpa-sec-2013-28, upstream #8481)

The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-3559

wireshark: DoS (crash) in the DCP ETSI dissector (wnpa-sec-2013-27, upstream #8231, #8540, #8541)

epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed

Vendors

Debian Opensuse Redhat and 1 more

Products

Debian Linux Opensuse Enterprise Linux and 1 more

CVE-2013-3558

wireshark: DoS (crash) in the PPP CCP dissector (wnpa-sec-2013-26, upstream #8638)

The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-3557

wireshark: DoS (crash) in the ASN.1 BER dissector (wnpa-sec-2013-25, upstream #8599)

The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 does not properly initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed

Vendors

Debian Opensuse Redhat and 1 more

Products

Debian Linux Opensuse Enterprise Linux and 1 more

CVE-2013-3556

wireshark: DoS (crash) in the ASN.1 BER dissector (wnpa-sec-2013-25, upstream #8599)

The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-3555

wireshark: DoS (crash) in the GTPv2 dissector (wnpa-sec-2013-24, upstream #8493)

epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related to ciphers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-2488

wireshark: Crash in the DTLS dissector (wnpa-sec-2013-22, upstream bug 8380)

The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-2487

wireshark: Infinite loop in the RELOAD dissector (wnpa-sec-2013-21, upstream bug 8364) [A different flaw than CVE-2013-2486]

epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet, related to the (1) dissect_icecandidates, (2) dissect_kinddata, (3) dissect_nodeid_list, (4) dissect_storeans, (5) dissect_storereq, (6) dissect_storeddataspecifier, (7) dissect_fetchreq, (8) dissect_findans, (9) dissect_diagnosticinfo, (10) dissect_diagnosticresponse, (11) dissect_reload_messagecontents, and (12) dissect_reload_message functions, a different vulnerability than CVE-2013-2486.

CVSS 2.0 · 7.8 High EPSS 3.4% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark