Wireshark

Wireshark

680 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2015-3815

  • EPSS 0.55%
  • Published 26.05.2015 15:59:09
  • Last modified 12.04.2025 10:46:40

The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and applicati...

5

CVE-2015-3814

  • EPSS 0.19%
  • Published 26.05.2015 15:59:08
  • Last modified 12.04.2025 10:46:40

The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a zero value as a length rather than an error ...

5

CVE-2015-3813

  • EPSS 0.24%
  • Published 26.05.2015 15:59:07
  • Last modified 12.04.2025 10:46:40

The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of an insufficient snapshot length, which allows remote attackers t...

7.8

CVE-2015-3812

  • EPSS 0.66%
  • Published 26.05.2015 15:59:06
  • Last modified 12.04.2025 10:46:40

Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a cr...

5

CVE-2015-3811

  • EPSS 0.21%
  • Published 26.05.2015 15:59:05
  • Last modified 12.04.2025 10:46:40

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafte...

7.8

CVE-2015-3810

  • EPSS 0.31%
  • Published 26.05.2015 15:59:04
  • Last modified 12.04.2025 10:46:40

epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.

7.8

CVE-2015-3809

  • EPSS 0.34%
  • Published 26.05.2015 15:59:02
  • Last modified 12.04.2025 10:46:40

The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a craft...

7.8

CVE-2015-3808

  • EPSS 0.23%
  • Published 26.05.2015 15:59:01
  • Last modified 12.04.2025 10:46:40

The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

5

CVE-2015-2192

  • EPSS 0.55%
  • Published 08.03.2015 02:59:06
  • Last modified 12.04.2025 10:46:40

Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length ...

5

CVE-2015-2191

  • EPSS 3.29%
  • Published 08.03.2015 02:59:05
  • Last modified 12.04.2025 10:46:40

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length...