Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2013-4932

wireshark: Multiple array index errors in the GSM A Common dissector (wnpa-sec-2013-50)

Multiple array index errors in epan/dissectors/packet-gsm_a_common.c in the GSM A Common dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allow remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-4931

wireshark: DoS (infinite loop) in the GSM RR dissector (wnpa-sec-2013-49)

epan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (loop) via a crafted packet that is not properly handled by the GSM RR dissector.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-4930

wireshark: Assertion failure in the DVB-CI dissector (wnpa-sec-2013-48)

The dissect_dvbci_tpdu_hdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not validate a certain length value before decrementing it, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4929

wireshark: DoS (infinite loop) in the DIS dissector (wnpa-sec-2013-47)

The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service (loop) via a crafted packet.

CVSS 2.0 · 7.8 High EPSS 3.6% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4928

wireshark: Integer signedness error in the Bluetooth OBEX dissector (wnpa-sec-2013-46)

Integer signedness error in the dissect_headers function in epan/dissectors/packet-btobex.c in the Bluetooth OBEX dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 7.8 High EPSS 3.2% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4927

wireshark: Integer signedness error in the Bluetooth SDP dissector (wnpa-sec-2013-45)

Integer signedness error in the get_type_length function in epan/dissectors/packet-btsdp.c in the Bluetooth SDP dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.

CVSS 2.0 · 7.8 High EPSS 3.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-4926

wireshark: DoS in the DCOM ISystemActivator dissector due improper remaining data to process presence check (wnpa-sec-2013-44)

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly determine whether there is remaining packet data to process, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4925

wireshark: Integer signedness error in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)

Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4924

wireshark: Assertion failure in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate certain index values, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4923

wireshark: Memory leak (DoS, memory consumption) in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)

Memory leak in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (memory consumption) via crafted packets.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4922

wireshark: Double-free in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)

Double free vulnerability in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4921

wireshark: Off-by-one (application crash) in the Radiotap dissector (wnpa-sec-2013-43)

Off-by-one error in the dissect_radiotap function in epan/dissectors/packet-ieee80211-radiotap.c in the Radiotap dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4920

wireshark: DoS (application crash) in the P1 dissector (wnpa-sec-2013-42)

The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-4083

wireshark: Invalid free in the DCP ETSI dissector (wnpa-sec-2013-41)

The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2013-4082

wireshark: Heap-based buffer overflow in the Ixia IxVeriWave file parser (wnpa-sec-2013-40)

The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between a record length and a trailer length, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 4.6% KEV · Not listed
Vendors
Debian Opensuse Wireshark
Products
Debian Linux Opensuse Wireshark
CVE-2023-0414

wireshark: EAP dissector crash

Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2023-2857

wireshark: BLF file parser crash

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2023-2854

wireshark: BLF file parser crash

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark