Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2013-1582

wireshark: Infinite loop / crash in the CLNP dissector (wnpa-sec-2013-02, bug 7871)

The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1581

wireshark: Infinite loop in the DCP-ETSI dissector (wnpa-sec-2013-01, bug 8222)

The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1580

wireshark: Infinite loop in the DOCSIS 3.0 CM-STATUS dissector (wnpa-sec-2013-01, bug 8199)

The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1579

wireshark: Nested loop (crash) in the RTPS dissector (wnpa-sec-2013-01, bug 8198)

The rtps_util_add_bitmap function in epan/dissectors/packet-rtps.c in the RTPS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly implement certain nested loops for processing bitmap data, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1578

wireshark: MPLS payload starting with valid-looking ethernet address dissected twice (wnpa-sec-2013-01, bug 8043)

The dissect_pw_eth_heuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service (loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1577

wireshark: Infinite loop in the SIP dissector (wnpa-sec-2013-01, bug 8042)

The dissect_sip_p_charging_func_addresses function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle offset data associated with a quoted string, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1576

wireshark: Infinite loop in the SDP dissector (wnpa-sec-2013-01, bug 8041)

The dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1575

wireshark: Infinite loop in the R3 dissector (wnpa-sec-2013-01, bug 8040)

The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1574

wireshark: Infinite loop in the Bluetooth HCI dissector (wnpa-sec-2013-01, bug 8038)

The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1573

wireshark: Infinite loop in the CSN.1 dissector (wnpa-sec-2013-01, bug 8037)

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1572

wireshark: Infinite loop in the Slow Protocols dissector (wnpa-sec-2013-01, bug 8036)

The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3 Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-6062

wireshark: DoS (infinite loop) in the RTCP dissector (wnpa-sec-2012-38)

The dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-6061

wireshark: DoS (infinite loop) in the WTP dissector (wnpa-sec-2012-37)

The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data type for a certain length field, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a crafted value in a packet.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-6060

wireshark: DoS (infinite loop) in the iSCSI dissector (wnpa-sec-2012-36)

Integer overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-iscsi.c in the iSCSI dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-6059

wireshark: DoS (crash) in the ISAKMP dissector (wnpa-sec-2012-35)

The dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data structure to determine IKEv2 decryption parameters, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-6058

wireshark: DoS (infinite loop) in the ICMPv6 dissector (wnpa-sec-2012-40)

Integer overflow in the dissect_icmpv6 function in epan/dissectors/packet-icmpv6.c in the ICMPv6 dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted Number of Sources value.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-6057

wireshark: DoS (infinite loop) in the EIGRP dissector (wnpa-sec-2012-34)

The dissect_eigrp_metric_comm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-6056

wireshark: DoS (infinite loop) in the SCTP dissector (wnpa-sec-2012-33)

Integer overflow in the dissect_sack_chunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted Duplicate TSN count.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-6055

wireshark: DoS (infinite loop) in the 3GPP2 A11 dissector (wnpa-sec-2012-39)

epan/dissectors/packet-3g-a11.c in the 3GPP2 A11 dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a zero value in a sub-type length field.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-6054

wireshark: DoS (infinite loop) in the sFlow dissector (wnpa-sec-2012-32)

The dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type, which allows remote attackers to cause a denial of service (infinite loop) via a packet that is neither IPv4 nor IPv6.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Wireshark
Products
Wireshark