Browse CVEs

MEDIUM 5.0 CVE-2015-3813 The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine th… Wireshark Mitigation only Fix from $1,6002015-05-26 HIGH 7.8 CVE-2015-3810 epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attac… Wireshark Mitigation only Fix from $1,9502015-05-26 HIGH 7.8 CVE-2015-3809 The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the c… Wireshark Mitigation only Fix from $1,9502015-05-26 HIGH 7.8 CVE-2015-3808 The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length… Wireshark No fix yet Fix from $1,9502015-05-26 MEDIUM 5.0 CVE-2015-2192 Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x bef… Wireshark Mitigation only Fix from $1,6002015-03-08 MEDIUM 5.0 CVE-2015-2190 epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote attacker… Wireshark Mitigation only Fix from $1,6002015-03-08 MEDIUM 5.0 CVE-2015-2189 Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.… Wireshark Mitigation only Fix from $1,6002015-03-08 MEDIUM 5.0 CVE-2015-2188 epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data str… Wireshark Mitigation only Fix from $1,6002015-03-08 MEDIUM 5.0 CVE-2015-2187 The dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12.4 does n… Wireshark Mitigation only Fix from $1,6002015-03-08 MEDIUM 5.0 CVE-2015-0564 Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3… Wireshark Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.0 CVE-2015-0563 epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for ce… Wireshark Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.0 CVE-2015-0562 Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.… Wireshark Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.0 CVE-2015-0561EPSS 6% asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allo… Wireshark Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.0 CVE-2015-0559 Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1… Wireshark Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.0 CVE-2015-0560 The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x … Wireshark Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.0 CVE-2014-8713 Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1… Wireshark Mitigation only Fix from $1,6002014-11-23 MEDIUM 5.0 CVE-2014-8714 The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x … Wireshark Mitigation only Fix from $1,6002014-11-23 MEDIUM 5.0 CVE-2014-8712 The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2… Wireshark Mitigation only Fix from $1,6002014-11-23 MEDIUM 5.0 CVE-2014-8711 Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow r… Wireshark Mitigation only Fix from $1,6002014-11-23 MEDIUM 5.0 CVE-2014-8710 The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attacke… Wireshark Mitigation only Fix from $1,6002014-11-23 MEDIUM 5.0 CVE-2014-6421 Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (applicatio… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6422 The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denia… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6423 The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 … Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6424 The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x befor… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6425 The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector in Wireshark 1.12.x before 1.1… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6426 The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle a NULL t… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6427 Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 a… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6428 The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not i… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6429 The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6430 The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does… Wireshark Mitigation only Fix from $1,6002014-09-20