Wireshark

Wireshark

680 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2011-3483

  • EPSS 7.69%
  • Published 20.09.2011 10:55:05
  • Last modified 11.04.2025 00:51:21

Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff, related to a "buffer exception handling vulnerability."

4.3

CVE-2011-3484

Exploit
  • EPSS 1.44%
  • Published 20.09.2011 10:55:05
  • Last modified 11.04.2025 00:51:21

The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly validate a certain frame size, which allows remote attackers to cause a denial of service (loop and applicati...

9.3

CVE-2011-3360

  • EPSS 65.77%
  • Published 20.09.2011 10:55:04
  • Last modified 11.04.2025 00:51:21

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.

4.3

CVE-2011-3482

Exploit
  • EPSS 0.95%
  • Published 20.09.2011 10:55:04
  • Last modified 11.04.2025 00:51:21

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (application crash) via...

2.6

CVE-2011-3266

  • EPSS 1.02%
  • Published 24.08.2011 00:55:00
  • Last modified 11.04.2025 00:51:21

The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed...

4.3

CVE-2011-2698

Exploit
  • EPSS 1.93%
  • Published 23.08.2011 21:55:01
  • Last modified 11.04.2025 00:51:21

Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (infinite loop) via an invalid ...

4.3

CVE-2011-2597

  • EPSS 1.14%
  • Published 07.07.2011 19:55:02
  • Last modified 11.04.2025 00:51:21

The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets.

4.3

CVE-2011-1956

Exploit
  • EPSS 6.47%
  • Published 06.06.2011 19:55:02
  • Last modified 11.04.2025 00:51:21

The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.

4.3

CVE-2011-1957

Exploit
  • EPSS 2.13%
  • Published 06.06.2011 19:55:02
  • Last modified 11.04.2025 00:51:21

The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length.

4.3

CVE-2011-1958

  • EPSS 1.03%
  • Published 06.06.2011 19:55:02
  • Last modified 11.04.2025 00:51:21

Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file.