Search Results (Refine Search)
- CPE Product Version: cpe:/a:wireshark:wireshark:1.8.2
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2013-3561 |
Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector. Published: May 24, 2013; 11:18:16 PM -0400 |
V3.x:(not available) V2.0: 7.8 HIGH |
CVE-2013-3560 |
The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Published: May 24, 2013; 11:18:16 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2013-3559 |
epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet. Published: May 24, 2013; 11:18:16 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2013-3558 |
The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Published: May 24, 2013; 11:18:16 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2013-3557 |
The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 does not properly initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Published: May 24, 2013; 11:18:16 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2013-3556 |
The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Published: May 24, 2013; 11:18:15 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2013-3555 |
epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related to ciphers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Published: May 24, 2013; 11:18:15 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2013-2488 |
The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location. Published: March 07, 2013; 10:55:02 AM -0500 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2013-2487 |
epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet, related to the (1) dissect_icecandidates, (2) dissect_kinddata, (3) dissect_nodeid_list, (4) dissect_storeans, (5) dissect_storereq, (6) dissect_storeddataspecifier, (7) dissect_fetchreq, (8) dissect_findans, (9) dissect_diagnosticinfo, (10) dissect_diagnosticresponse, (11) dissect_reload_messagecontents, and (12) dissect_reload_message functions, a different vulnerability than CVE-2013-2486. Published: March 07, 2013; 10:55:02 AM -0500 |
V3.x:(not available) V2.0: 7.8 HIGH |
CVE-2013-2486 |
The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 6.1 MEDIUM |
CVE-2013-2485 |
The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 6.1 MEDIUM |
CVE-2013-2484 |
The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 3.3 LOW |
CVE-2013-2483 |
The acn_add_dmp_data function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via an invalid count value in ACN_DMP_ADT_D_RE DMP data. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 3.3 LOW |
CVE-2013-2482 |
The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 6.1 MEDIUM |
CVE-2013-2481 |
Integer signedness error in the dissect_mount_dirpath_call function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfs_file_name_snooping is enabled, allows remote attackers to cause a denial of service (application crash) via a negative length value. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 2.9 LOW |
CVE-2013-2480 |
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 3.3 LOW |
CVE-2013-2479 |
The dissect_mpls_echo_tlv_dd_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via invalid Sub-tlv data. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 3.3 LOW |
CVE-2013-2478 |
The dissect_server_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service (application crash) via a malformed packet that (1) triggers an integer overflow or (2) has embedded '\0' characters in a string. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 3.3 LOW |
CVE-2013-2477 |
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 3.3 LOW |
CVE-2013-2476 |
The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a packet with a header that is too short. Published: March 07, 2013; 10:55:01 AM -0500 |
V3.x:(not available) V2.0: 6.1 MEDIUM |