CVSS: 7.5EPSS: 1%CPEs: 15EXPL: 0CVE-2015-0562 – wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)
https://notcve.org/view.php?id=CVE-2015-0562
10 Jan 2015 — Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory. Múltiples vulnerabilidades de uso después de liberación en epan/dissectors/packet-dec-dnart.c en el diseccionador DEC DNA Routing Protocol en Wireshark 1.10.x anteri... • http://advisories.mageia.org/MGASA-2015-0019.html • CWE-416: Use After Free •
CVSS: 7.5EPSS: 1%CPEs: 17EXPL: 0CVE-2015-0563 – wireshark: SMTP dissector crash (wnpa-sec-2015-04)
https://notcve.org/view.php?id=CVE-2015-0563
10 Jan 2015 — epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. epan/dissectors/packet-smtp.c en el disector SMTP en Wireshark 1.10.x anterior a 1.10.12 y 1.12.x anterior a 1.12.3 utiliza un valor de longitud incorrecto para ciertas operaciones 'string-append', lo que permite a atacantes remot... • http://advisories.mageia.org/MGASA-2015-0019.html • CWE-20: Improper Input Validation CWE-131: Incorrect Calculation of Buffer Size •
CVSS: 7.5EPSS: 0%CPEs: 21EXPL: 0CVE-2015-0564 – wireshark: TLS/SSL decryption crash (wnpa-sec-2015-05)
https://notcve.org/view.php?id=CVE-2015-0564
10 Jan 2015 — Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session. Desbordamiento de buffer en la función ssl_decrypt_record en epan/dissectors/packet-ssl-utils.c en Wireshark 1.10.x anterior a 1.10.12 y 1.12.x anterior a 1.12.3 permite a atacantes remotos causar una den... • http://advisories.mageia.org/MGASA-2015-0019.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-131: Incorrect Calculation of Buffer Size •
CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0CVE-2014-8710 – wireshark: SigComp dissector crash (wnpa-sec-2014-20)
https://notcve.org/view.php?id=CVE-2014-8710
21 Nov 2014 — The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet. La función decompress_sigcomp_message en epan/sigcomp-udvm.c en el diseccionador SigComp UDVM en Wireshark 1.10.x anterior a 1.10.11 permite a atacantes remotos causar una denegación de servicio (sobrelectura de buffer y caída de aplicación) a través de un paquete man... • http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 2%CPEs: 13EXPL: 0CVE-2014-8711 – wireshark: AMQP dissector crash (wnpa-sec-2014-21)
https://notcve.org/view.php?id=CVE-2014-8711
21 Nov 2014 — Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a packet. Múltiples desbordamientos de enteros en epan/dissectors/packet-amqp.c en el diseccionador AMQP en Wireshark 1.10.x anterior a 1.10.11 y 1.12.x anterior a 1.12.2 permiten a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de... • http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html • CWE-189: Numeric Errors •
CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0CVE-2014-8712 – wireshark: NCP dissector crashes (wnpa-sec-2014-22)
https://notcve.org/view.php?id=CVE-2014-8712
21 Nov 2014 — The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. La función build_expert_data en epan/dissectors/packet-ncp2222.inc en el diseccionador NCP en Wireshark 1.10.x anterior a 1.10.11 y 1.12.x anterior a 1.12.2 no inicializa debidamente una estructura de datos, lo que... • http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 1%CPEs: 13EXPL: 0CVE-2014-8713 – wireshark: NCP dissector crashes (wnpa-sec-2014-22)
https://notcve.org/view.php?id=CVE-2014-8713
21 Nov 2014 — Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Desbordamiento de buffer basado en pila en la función build_expert_data en epan/dissectors/packet-ncp2222.inc en el diseccionador NCP en Wireshark 1.10.x anterior a 1.10.11 y 1.12.x anterior a 1.12.2 permite a atacantes remotos causar u... • http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 1%CPEs: 13EXPL: 0CVE-2014-8714 – wireshark: TN5250 infinite loop (wnpa-sec-2014-23)
https://notcve.org/view.php?id=CVE-2014-8714
21 Nov 2014 — The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. La función dissect_write_structured_field en epan/dissectors/packet-tn5250.c en el diseccionador TN5250 en Wireshark 1.10.x anterior a 1.10.11 y 1.12.x anterior a 1.12.2 permite a atacantes remotos causar una denegación de servicio (bucle infinito) a través ... • http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html • CWE-399: Resource Management Errors CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 7.5EPSS: 1%CPEs: 11EXPL: 0CVE-2014-6423 – wireshark: MEGACO dissector infinite loop (wnpa-sec-2014-13)
https://notcve.org/view.php?id=CVE-2014-6423
20 Sep 2014 — The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (infinite loop) via an empty line. La función tvb_raw_text_add en epan/dissectors/packet-megaco.c en el diseccionador MEGACO en Wireshark 1.10.x anterior a 1.10.10 y 1.12.x anterior a 1.12.1 permite a atacantes remotos causar una denegación de servicio (bucle infinito) a través de una línea en blanco. Wiresha... • http://linux.oracle.com/errata/ELSA-2014-1676 • CWE-399: Resource Management Errors CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 0CVE-2014-6424 – wireshark: Netflow dissector crash (wnpa-sec-2014-14)
https://notcve.org/view.php?id=CVE-2014-6424
20 Sep 2014 — The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 refers to incorrect offset and start variables, which allows remote attackers to cause a denial of service (uninitialized memory read and application crash) via a crafted packet. La función dissect_v9_v10_pdu_data en epan/dissectors/packet-netflow.c en el diseccionador Netflow en Wireshark 1.10.x anterior a 1.10.10 y 1.12.x anterior a 1.12.1 hace refer... • http://linux.oracle.com/errata/ELSA-2014-1676 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •