CVE-2012-6053

wireshark: DoS (infinite loop) in the USB dissector (wnpa-sec-2012-31)

epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 relies on a length field to calculate an offset value, which allows remote attackers to cause a denial of service (infinite loop) via a zero value for this field.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2012-6052

wireshark: pcap-ng hostname disclosure (wnpa-sec-2012-30)

Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostname information by reading pcap-ng files.

CVSS 2.0 · 5.0 Medium EPSS 2.2% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2012-5240

wireshark: Stack-based buffer overflow in the LDP dissector

Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malformed packet.

CVSS 2.0 · 5.8 Medium EPSS 1.4% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2012-5238

wireshark: Application abort due to wrong variable type in PPP dissector

epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.3 uses incorrect OUI data structures during the decoding of (1) PPP and (2) LCP data, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2012-5237

wireshark: Infinite loop in the HSRP dissector

The dissect_hsrp function in epan/dissectors/packet-hsrp.c in the HSRP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2012-4298

wireshark: buffer overflow in Ixia IxVeriWave file parser (wnpa-sec-2012-25)

Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.

CVSS 2.0 · 5.4 Medium EPSS 6.0% KEV · Not listed

Vendors

Sun Wireshark

Products

Sunos Wireshark

CVE-2012-4297

wireshark: buffer overflow in GSM RLC MAC dissector (wnpa-sec-2012-19)

Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.

CVSS 2.0 · 8.3 High EPSS 2.3% KEV · Not listed

Vendors

Sun Wireshark

Products

Sunos Wireshark

CVE-2012-4296

wireshark: DoS via excessive CPU consumption in RTPS2 dissector (wnpa-sec-2012-18)

Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS 2.1% KEV · Not listed

Vendors

Opensuse Sun Wireshark

Products

Opensuse Sunos Wireshark

CVE-2012-4295

wireshark: buffer overflow in ERF dissector (wnpa-sec-2012-16)

Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.

CVSS 2.0 · 3.3 Low EPSS 1.5% KEV · Not listed

Vendors

Sun Wireshark

Products

Sunos Wireshark

CVE-2012-4294

wireshark: buffer overflow in ERF dissector (wnpa-sec-2012-16)

Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.

CVSS 2.0 · 5.8 Medium EPSS 3.3% KEV · Not listed

Vendors

Sun Wireshark

Products

Sunos Wireshark

CVE-2012-4293

wireshark: premature exit in EtherCAT Mailbox dissector (wnpa-sec-2012-22)

plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly handle certain integer fields, which allows remote attackers to cause a denial of service (application exit) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS 1.2% KEV · Not listed

Vendors

Opensuse Sun Wireshark

Products

Opensuse Sunos Wireshark

CVE-2012-4292

wireshark: crash in STUN dissector (wnpa-sec-2012-21)

The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS 1.9% KEV · Not listed

Vendors

Opensuse Redhat Sun and 1 more

Products

Opensuse Enterprise Linux Sunos and 1 more

CVE-2012-4291

wireshark: DoS via excessive system resource consumption in CIP dissector (wnpa-sec-2012-20)

The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS 1.2% KEV · Not listed

Vendors

Opensuse Redhat Sun and 1 more

Products

Opensuse Enterprise Linux Sunos and 1 more

CVE-2012-4290

wireshark: DoS via excessive CPU consumption in CTDB dissector (wnpa-sec-2012-23)

The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS 1.2% KEV · Not listed

Vendors

Opensuse Redhat Sun and 1 more

Products

Opensuse Enterprise Linux Sunos and 1 more

CVE-2012-4289

wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17)

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.

CVSS 2.0 · 3.3 Low EPSS 1.3% KEV · Not listed

Vendors

Opensuse Redhat Sun and 1 more

Products

Opensuse Enterprise Linux Sunos and 1 more

CVE-2012-4288

wireshark: DoS via excessive resource consumption in XTP dissector (wnpa-sec-2012-15)

Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length.

CVSS 2.0 · 3.3 Low EPSS 1.9% KEV · Not listed

Vendors

Opensuse Redhat Sun and 1 more

Products

Opensuse Enterprise Linux Sunos and 1 more

CVE-2012-4287

wireshark: DoS via excessive CPU consumption in MongoDB dissector (wnpa-sec-2012-14)

epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed

Vendors

Sun Wireshark

Products

Sunos Wireshark

CVE-2012-4286

wireshark: crash due to zero division in pcnap-ng file parser (wnpa-sec-2012-24)

The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Sun Wireshark

Products

Sunos Wireshark

CVE-2012-4285

wireshark: crash due to zero division in DCP ETSI dissector (wnpa-sec-2012-13)

The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.

CVSS 2.0 · 3.3 Low EPSS 2.1% KEV · Not listed

Vendors

Opensuse Redhat Sun and 1 more

Products

Opensuse Enterprise Linux Sunos and 1 more

CVE-2012-4049

wireshark: Excessive CPU usage in NFS dissector

epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.

CVSS 2.0 · 2.9 Low EPSS 1.6% KEV · Not listed

Vendors

Opensuse Wireshark

Products

Opensuse Wireshark