Wireshark

Wireshark

685 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2014-2281

Exploit
  • EPSS 3.33%
  • Veröffentlicht 11.03.2014 13:01:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service (...

4.3

CVE-2014-2282

  • EPSS 0.57%
  • Veröffentlicht 11.03.2014 13:01:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) vi...

4.3

CVE-2014-2283

Exploit
  • EPSS 2.41%
  • Veröffentlicht 11.03.2014 13:01:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service (use-after-free error and application...

9.3

CVE-2014-2299

  • EPSS 70.17%
  • Veröffentlicht 11.03.2014 13:01:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large re...

5

CVE-2013-7112

Exploit
  • EPSS 1.07%
  • Veröffentlicht 19.12.2013 22:55:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service (infinite loop) ...

5

CVE-2013-7113

Exploit
  • EPSS 0.97%
  • Veröffentlicht 19.12.2013 22:55:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

5

CVE-2013-7114

  • EPSS 0.98%
  • Veröffentlicht 19.12.2013 22:55:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple buffer overflows in the create_ntlmssp_v2_key function in epan/dissectors/packet-ntlmssp.c in the NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to cause a denial of service (application...

4.3

CVE-2013-6336

Exploit
  • EPSS 0.88%
  • Veröffentlicht 04.11.2013 16:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a denial of servic...

4.3

CVE-2013-6337

  • EPSS 0.27%
  • Veröffentlicht 04.11.2013 16:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

4.3

CVE-2013-6338

  • EPSS 0.88%
  • Veröffentlicht 04.11.2013 16:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (...