CVE-2016-7958
- EPSS 0.39%
- Published 12.04.2017 10:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector.
CVE-2017-6467
- EPSS 0.7%
- Published 04.03.2017 03:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size.
CVE-2017-6468
- EPSS 0.7%
- Published 04.03.2017 03:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records.
CVE-2017-6469
- EPSS 0.7%
- Published 04.03.2017 03:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by ensuring that memory is allocated for a certain data ...
CVE-2017-6470
- EPSS 0.39%
- Published 04.03.2017 03:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness.
CVE-2017-6471
- EPSS 0.7%
- Published 04.03.2017 03:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length.
CVE-2017-6472
- EPSS 0.7%
- Published 04.03.2017 03:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence va...
CVE-2017-6473
- EPSS 0.7%
- Published 04.03.2017 03:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.
CVE-2017-6474
- EPSS 0.7%
- Published 04.03.2017 03:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes.
CVE-2017-6014
- EPSS 0.42%
- Published 17.02.2017 07:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attem...