CVE-2013-2486

wireshark: Infinite loop in the RELOAD dissector (wnpa-sec-2013-21, upstream bug 8364) [A different flaw than CVE-2013-2487]

The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet.

CVSS 2.0 · 6.1 Medium EPSS 1.3% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-2485

wireshark: Infinite loop in the FCSP dissector (wnpa-sec-2013-20, upstream bug 8359)

The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 6.1 Medium EPSS 1.1% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-2484

wireshark: Crash in the CIMD dissector (wnpa-sec-2013-19, upstream bug 8346)

The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-2483

wireshark: Divide by zero in the ACN dissector (wnpa-sec-2013-18, upstream bug 8340)

The acn_add_dmp_data function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via an invalid count value in ACN_DMP_ADT_D_RE DMP data.

CVSS 2.0 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-2482

wireshark: Infinite loop in the AMPQ dissector (wnpa-sec-2013-17, upstream bug 8337)

The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 6.1 Medium EPSS 1.1% KEV · Not listed

Vendors

Opensuse Wireshark

Products

Opensuse Wireshark

CVE-2013-2481

wireshark: Crash in the Mount dissector (wnpa-sec-2013-16, upstream bug 8335)

Integer signedness error in the dissect_mount_dirpath_call function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfs_file_name_snooping is enabled, allows remote attackers to cause a denial of service (application crash) via a negative length value.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-2478

wireshark: Crash in the MS-MMS dissector (wnpa-sec-2013-13, upstream bug 8382)

The dissect_server_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service (application crash) via a malformed packet that (1) triggers an integer overflow or (2) has embedded '\0' characters in a string.

CVSS 2.0 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-2477

wireshark: Crash in the CSN.1 dissector (wnpa-sec-2013-12, upstream bug 8383)

The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Opensuse Wireshark

Products

Opensuse Wireshark

CVE-2013-2476

wireshark: Infinite loop in the HART/IP dissector (wnpa-sec-2013-11, upstream bug 8360)

The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a packet with a header that is too short.

CVSS 2.0 · 6.1 Medium EPSS 1.1% KEV · Not listed

Vendors

Opensuse Wireshark

Products

Opensuse Wireshark

CVE-2013-2475

wireshark: TCP dissector crash (wnpa-sec-2013-10, upstream bug 8274)

The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Opensuse Wireshark

Products

Opensuse Wireshark

CVE-2013-2480

wireshark: Crash in the RTPS and RTPS2 dissectors (wnpa-sec-2013-15, upstream bug 8332)

The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Debian Opensuse Wireshark

Products

Debian Linux Opensuse Wireshark

CVE-2013-2479

wireshark: Infinite loop in the MPLS Echo dissector (wnpa-sec-2013-14, upstream bug 8039)

The dissect_mpls_echo_tlv_dd_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via invalid Sub-tlv data.

CVSS 2.0 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Opensuse Wireshark

Products

Opensuse Wireshark

CVE-2013-1590

wireshark: Buffer overflow in the NTLMSSP dissector (wnpa-sec-2013-09)

Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2013-1589

wireshark: Wireshark dissection engine invalid read / crash (wnpa-sec-2013-08, bug 8197)

Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2013-1588

wireshark: DCP-ETSI dissector crash (wnpa-sec-2013-07, bug 8213)

Multiple buffer overflows in the dissect_pft_fec_detailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2013-1587

wireshark: ROHC dissector crash (wnpa-sec-2013-06, bug 7679)

The dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2013-1586

wireshark: DTLS dissector crash (wnpa-sec-2013-05, bug 8111)

The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2013-1585

wireshark: MS-MMC dissector crash (wnpa-sec-2013-04, bug 8112)

epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2013-1584

wireshark: Invalid read (crash) in the DTN dissector (wnpa-sec-2013-03, bug 7945) [A different issue than CVE-2013-1583]

The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2013-1583

wireshark: Invalid read (crash) in the DTN dissector (wnpa-sec-2013-03, bug 7945)

The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark