Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2012-4048

wireshark: Out-of-bounds memory write in PPP dissector

The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon dump.

CVSS 2.0 · 3.3 Low EPSS 1.4% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2012-3826

wireshark: Integer overflows in the R3 dissector, leading to DoS (wnpa-sec-2012-08)

Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (loop) via vectors related to the R3 dissector, a different vulnerability than CVE-2012-2392.

CVSS 2.0 · 3.3 Low EPSS 3.4% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-3825

wireshark: Integer overflows in BACapp and Bluetooth HCI dissectors, leading to DoS (wnpa-sec-2012-08)

Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.

CVSS 2.0 · 3.3 Low EPSS 3.3% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-3548

1.6.8): DoS (excessive CPU use and infinite loop) in DRDA dissector

The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a small value for a certain length field in a capture file.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-2394

wireshark: Denial of service (crash) due memory alignment problem on SPARC and Itanium processors (wnpa-sec-2012-10)

Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.

CVSS 2.0 · 3.3 Low EPSS 3.9% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-2393

wireshark: Memory allocation flaw in the DIAMETER dissector (wnpa-sec-2012-09)

epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation.

CVSS 2.0 · 3.3 Low EPSS 3.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-2392

wireshark: Infinite and large loops in ANSI MAP, ASF, IEEE 802.11, IEEE 802.3, and LTP dissectors (wnpa-sec-2012-08)

Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.

CVSS 2.0 · 3.3 Low EPSS 3.4% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-1596

wireshark: MP2T dissector memory allocation flaw

The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a packet containing an invalid pointer value that triggers an incorrect memory-allocation attempt.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-1595

wireshark: Heap-based buffer overflow when reading ERF packets from pcap/pcap-ng trace files

The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a WTAP_ENCAP_ERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size, related to the pcap and pcap-ng file parsers.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-1594

wireshark: Infinite loop in the IEEE 802.11 dissector

epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 3.3 Low EPSS 1.6% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-1593

wireshark: NULL pointer dereference in ANSI A dissector

epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS 11.2% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-0068

Wireshark: Heap-buffer underflow when parsing LANalyzer packet capture files

The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a Novell capture file containing a record that is too small.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-0067

Wireshark: Dos due to integer overflow in IPTrace capture format parser

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

CVSS 2.0 · 4.3 Medium EPSS 6.5% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-0066

Wireshark: Dos via large buffer allocation request

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a (1) Accellent 5Views (aka .5vw) file, (2) I4B trace file, or (3) NETMON 2 capture file.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-0042

wireshark: NULL pointer vulnerabilities (wnpa-sec-2012-02)

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet, related to epan/to_str.c.

CVSS 2.0 · 2.9 Low EPSS 1.9% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-0041

wireshark: multiple file parser vulnerabilities (wnpa-sec-2012-01)

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-0043

wireshark: RLC dissector buffer overflow (wnpa-sec-2012-03)

Buffer overflow in the reassemble_message function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a series of fragmented RLC packets.

CVSS 2.0 · 5.8 Medium EPSS 3.1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2011-4102

wireshark: buffer overflow in the ERF file reader

Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (application crash) via a malformed file.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2011-4101

wireshark: NULL pointer dereference in Infiniband dissector can cause a crash

The dissect_infiniband_common function in epan/dissectors/packet-infiniband.c in the Infiniband dissector in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed packet.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2011-4100

wireshark: uninitialized variable in the CSN.1 dissector can cause a crash

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Wireshark
Products
Wireshark