Wireshark

Wireshark

692 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2016-2526

  • EPSS 0.22%
  • Veröffentlicht 28.02.2016 04:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

5.9

CVE-2016-2525

  • EPSS 0.29%
  • Veröffentlicht 28.02.2016 04:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet...

5.9

CVE-2016-2524

  • EPSS 0.22%
  • Veröffentlicht 28.02.2016 04:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

7.1

CVE-2016-2523

  • EPSS 4.92%
  • Veröffentlicht 28.02.2016 04:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

5.9

CVE-2016-2522

Exploit
  • EPSS 0.22%
  • Veröffentlicht 28.02.2016 04:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service (ou...

7.8

CVE-2016-2521

  • EPSS 0.03%
  • Veröffentlicht 28.02.2016 04:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges via a Trojan horse riched20.dll.dll fi...

5.5

CVE-2015-8742

  • EPSS 0.09%
  • Veröffentlicht 04.01.2016 05:59:32
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service (memory consumption or applica...

5.5

CVE-2015-8741

  • EPSS 0.13%
  • Veröffentlicht 04.01.2016 05:59:31
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service (application crash) via a cra...

5.3

CVE-2015-8740

  • EPSS 3.26%
  • Veröffentlicht 04.01.2016 05:59:30
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service (stack-based buffer o...

5.5

CVE-2015-8738

  • EPSS 0.09%
  • Veröffentlicht 04.01.2016 05:59:29
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of s...