Wireshark

Wireshark

685 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2016-4081

  • EPSS 0.37%
  • Veröffentlicht 25.04.2016 10:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

5.9

CVE-2016-4080

  • EPSS 0.36%
  • Veröffentlicht 25.04.2016 10:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a craf...

5.9

CVE-2016-4079

  • EPSS 0.23%
  • Veröffentlicht 25.04.2016 10:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via ...

5.9

CVE-2016-4078

  • EPSS 0.36%
  • Veröffentlicht 25.04.2016 10:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted packet, rela...

5.9

CVE-2016-4077

Exploit
  • EPSS 0.22%
  • Veröffentlicht 25.04.2016 10:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case handling of truncated Tvb data structures, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted pa...

5.9

CVE-2016-4076

  • EPSS 0.17%
  • Veröffentlicht 25.04.2016 10:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

5.9

CVE-2016-4006

  • EPSS 0.2%
  • Veröffentlicht 25.04.2016 10:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause a denial of service (stack memory consumption and application crash) via a crafted packet.

5.9

CVE-2016-2532

  • EPSS 1.43%
  • Veröffentlicht 28.02.2016 04:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote attackers to cause a denial of service (memo...

5.9

CVE-2016-2531

  • EPSS 1.43%
  • Veröffentlicht 28.02.2016 04:59:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that ...

5.9

CVE-2016-2530

  • EPSS 1.43%
  • Veröffentlicht 28.02.2016 04:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, which allows remote attackers to cause a denial of se...