Browse CVEs

MEDIUM 5.0 CVE-2014-6431 Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-6432 The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does… Wireshark Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-5161 The dissect_log function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' character… Wireshark Mitigation only Fix from $1,6002014-08-01 MEDIUM 5.0 CVE-2014-5162 The read_new_line function in wiretap/catapult_dct2000.c in the Catapult DCT2000 dissector in Wireshark 1.10.x before 1.10.9 does not properly strip … Wireshark Mitigation only Fix from $1,6002014-08-01 MEDIUM 5.0 CVE-2014-5163 The APN decode functionality in (1) epan/dissectors/packet-gtp.c and (2) epan/dissectors/packet-gsm_a_gm.c in the GTP and GSM Management dissectors i… Wireshark No fix yet Fix from $1,6002014-08-01 MEDIUM 5.0 CVE-2014-5164 The rlc_decode_li function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure mem… Wireshark No fix yet Fix from $1,6002014-08-01 MEDIUM 5.0 CVE-2014-5165 The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not … Wireshark No fix yet Fix from $1,6002014-08-01 HIGH 9.3 CVE-2014-2299EPSS 47% Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remot… Wireshark No fix yet Fix from $1,9502014-03-11 MEDIUM 5.0 CVE-2013-5720 Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service … Wireshark Mitigation only Fix from $1,6002013-09-16 MEDIUM 5.0 CVE-2013-4074EPSS 61% The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 i… Wireshark No fix yet Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4075 epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remo… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4078 epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4079 The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote at… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4080 The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4081 The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-3558 The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bi… Wireshark Mitigation only Fix from $1,6002013-05-25 MEDIUM 5.0 CVE-2013-3556 The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference … Wireshark Mitigation only Fix from $1,6002013-05-25 MEDIUM 5.0 CVE-2013-2488 The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state… Wireshark Mitigation only Fix from $1,6002013-03-07 MEDIUM 6.1 CVE-2013-2476 The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to ca… Wireshark Mitigation only Fix from $1,6002013-03-07 MEDIUM 6.1 CVE-2013-2482 The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a… Wireshark Mitigation only Fix from $1,6002013-03-07 MEDIUM 5.0 CVE-2012-6058 Integer overflow in the dissect_icmpv6 function in epan/dissectors/packet-icmpv6.c in the ICMPv6 dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x… Wireshark No fix yet Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6059 The dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses a… Wireshark No fix yet Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6060 Integer overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-iscsi.c in the iSCSI dissector in Wireshark 1.6.x before 1.6.12 and 1.8.… Wireshark No fix yet Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6061 The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an … Wireshark No fix yet Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6052 Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostname information by reading pcap-ng files. Wireshark Mitigation only Fix from $1,6002012-12-05 MEDIUM 5.8 CVE-2012-5240 Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attack… Wireshark Mitigation only Fix from $1,6002012-10-04 MEDIUM 5.0 CVE-2012-1596 The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before… Wireshark Mitigation only Fix from $1,6002012-04-11 HIGH 9.3 CVE-2011-3360EPSS 35% Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse L… Wireshark Mitigation only Fix from $1,9502011-09-20 HIGH 9.3 CVE-2011-1591EPSS 42% Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute… Wireshark No fix yet Fix from $1,9502011-04-29 HIGH 7.5 CVE-2011-1142 Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 mig… Wireshark Mitigation only Fix from $1,9502011-03-03