Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2010-2283

wireshark: SMB dissector NULL pointer dereference

The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.

CVSS 2.0 · 3.3 Low EPSS 1.1% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-7114

wireshark: NTLMSSP v2 dissector could crash (wnpa-sec-2013-68)

Multiple buffer overflows in the create_ntlmssp_v2_key function in epan/dissectors/packet-ntlmssp.c in the NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to cause a denial of service (application crash) via a long domain name in a packet.

CVSS 2.0 · 5.0 Medium EPSS 2.2% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-7113

wireshark: BSSGP dissector could crash (wnpa-sec-2013-67)

epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.2% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-7112

wireshark: SIP dissector could go into an infinite loop (wnpa-sec-2013-66)

The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-6340

wireshark: TCP dissector crash (wnpa-sec-2013-65)

epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly determine the amount of remaining data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-6339

wireshark: ActiveMQ OpenWire dissector large loop (wnpa-sec-2013-64)

The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (loop) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-6338

wireshark: SIP dissector crash (wnpa-sec-2013-63)

The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-6337

wireshark: NBAP dissector crash (wnpa-sec-2013-62)

Unspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-6336

wireshark: IEEE 802.15.4 dissector crash (wnpa-sec-2013-61)

The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-5722

wireshark: LDAP dissector crash (wnpa-sec-2013-59)

Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-5721

wireshark: MQ dissector crash (wnpa-sec-2013-58, upstream bug 9079)

The dissect_mq_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not properly determine when to enter a certain loop, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-5720

wireshark: RTPS dissector crash (wnpa-sec-2013-57)

Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-5719

wireshark: ASSA R3 dissector crash (wnpa-sec-2013-56, upstream bug 9020)

epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-5718

wireshark: NBAP dissector crash (wnpa-sec-2013-55, upstream bug 9005)

The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-5717

wireshark: Bluetooth HCI ACL dissector crash (wnpa-sec-2013-54, upstream bug 8827)

The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4936

wireshark: DoS (NULL pointer dereference, crash) in the PROFINET Real-Time dissector (wnpa-sec-2013-53)

The IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-4935

wireshark: DoS (application crash) in the ASN.1 PER dissector (wnpa-sec-2013-52)

The dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize a length field in certain abnormal situations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-4934

wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51) (A different flaw than CVE-2013-4933)

The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize certain structure members, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file.

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-4933

wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51)

The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark