Wireshark

Wireshark

680 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2013-3557

Exploit
  • EPSS 4.18%
  • Published 25.05.2013 03:18:16
  • Last modified 11.04.2025 00:51:21

The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 does not properly initialize a certain variable, which allows remote attackers to cause a denial of ser...

5

CVE-2013-3558

  • EPSS 3.26%
  • Published 25.05.2013 03:18:16
  • Last modified 11.04.2025 00:51:21

The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service (application crash) via a ma...

5

CVE-2013-3559

Exploit
  • EPSS 5.04%
  • Published 25.05.2013 03:18:16
  • Last modified 11.04.2025 00:51:21

epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer de...

5

CVE-2013-3560

Exploit
  • EPSS 3.45%
  • Published 25.05.2013 03:18:16
  • Last modified 11.04.2025 00:51:21

The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash)...

7.8

CVE-2013-3561

  • EPSS 1.52%
  • Published 25.05.2013 03:18:16
  • Last modified 11.04.2025 00:51:21

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector,...

5

CVE-2013-3562

Exploit
  • EPSS 3.44%
  • Published 25.05.2013 03:18:16
  • Last modified 11.04.2025 00:51:21

Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (application crash) via a malformed p...

5

CVE-2013-3555

Exploit
  • EPSS 3.4%
  • Published 25.05.2013 03:18:15
  • Last modified 11.04.2025 00:51:21

epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related to ciphers, which allows remote attackers to cause a denial of service (application crash) via a malformed pac...

5

CVE-2013-3556

  • EPSS 1.54%
  • Published 25.05.2013 03:18:15
  • Last modified 11.04.2025 00:51:21

The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service (application crash) v...

7.8

CVE-2013-2487

  • EPSS 3.56%
  • Published 07.03.2013 15:55:02
  • Last modified 11.04.2025 00:51:21

epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via crafted in...

5

CVE-2013-2488

  • EPSS 3.87%
  • Published 07.03.2013 15:55:02
  • Last modified 11.04.2025 00:51:21

The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large ...