Browse CVEs

MEDIUM 5.0 CVE-2013-4078 epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4079 The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote at… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4080 The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4081 The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4082 The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between … Wireshark Patch available Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4083 The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.1… Wireshark Patch available Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-3557 The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 do… Wireshark Patch available Fix from $1,6002013-05-25 MEDIUM 5.0 CVE-2013-3558 The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bi… Wireshark Mitigation only Fix from $1,6002013-05-25 MEDIUM 5.0 CVE-2013-3556 The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference … Wireshark Mitigation only Fix from $1,6002013-05-25 MEDIUM 5.0 CVE-2013-2488 The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state… Wireshark Mitigation only Fix from $1,6002013-03-07 MEDIUM 6.1 CVE-2013-2476 The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to ca… Wireshark Mitigation only Fix from $1,6002013-03-07 MEDIUM 6.1 CVE-2013-2482 The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a… Wireshark Mitigation only Fix from $1,6002013-03-07 MEDIUM 5.0 CVE-2012-6056 Integer overflow in the dissect_sack_chunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows rem… Wireshark Patch available Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6057 The dissect_eigrp_metric_comm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data t… Wireshark Patch available Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6058 Integer overflow in the dissect_icmpv6 function in epan/dissectors/packet-icmpv6.c in the ICMPv6 dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x… Wireshark No fix yet Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6059 The dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses a… Wireshark No fix yet Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6060 Integer overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-iscsi.c in the iSCSI dissector in Wireshark 1.6.x before 1.6.12 and 1.8.… Wireshark No fix yet Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6061 The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an … Wireshark No fix yet Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6062 The dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows r… Wireshark Patch available Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6052 Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostname information by reading pcap-ng files. Wireshark Mitigation only Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6053 epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 relies on a length field to calculate an of… Wireshark Patch available Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6054 The dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properl… Wireshark Patch available Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-6055 epan/dissectors/packet-3g-a11.c in the 3GPP2 A11 dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infi… Wireshark Patch available Fix from $1,6002012-12-05 MEDIUM 5.8 CVE-2012-5240 Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attack… Wireshark Mitigation only Fix from $1,6002012-10-04 HIGH 8.3 CVE-2012-4297 Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x be… Wireshark Patch available Fix from $1,9502012-08-16 MEDIUM 5.4 CVE-2012-4298EPSS 6% Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8… Wireshark Patch available Fix from $1,6002012-08-16 MEDIUM 5.8 CVE-2012-4294 Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2… Wireshark Patch available Fix from $1,6002012-08-16 MEDIUM 5.0 CVE-2012-4287 epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop an… Wireshark Patch available Fix from $1,6002012-08-16 MEDIUM 5.0 CVE-2012-1596 The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before… Wireshark Mitigation only Fix from $1,6002012-04-11 MEDIUM 5.8 CVE-2012-0043 Buffer overflow in the reassemble_message function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x be… Wireshark Patch available Fix from $1,6002012-04-11