CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-6014
https://notcve.org/view.php?id=CVE-2017-6014
In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory. En Wireshark 2.2.4 y versiones anteriores, un archivo de captura STANAG 4607 manipulado o mal formado causará un bucle infinito y agotamiento de memoria. Si el campo de tamaño de paquete en un encabezado de paquete es nulo, el desplazamiento a leer no avanzará, provocando intentos continuos para leer el mismo paquete de longitud cero. • http://www.debian.org/security/2017/dsa-3811 http://www.securityfocus.com/bid/96284 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416 https://security.gentoo.org/glsa/201706-12 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 4.3EPSS: 0%CPEs: 28EXPL: 0CVE-2011-2597 – wireshark: infinite loop DoS in lucent/ascend file parser
https://notcve.org/view.php?id=CVE-2011-2597
The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets. El analizador de archivos en Wireshark de Lucent/Ascend v1.2.x antes de v1.2.18, v1.4.x a v1.4.7, y v1.6.0 permite a atacantes remotos causar una denegación de servicio (por un bucle infinito) a través de paquetes mal formados. • http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063586.html http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063591.html http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00022.html http://secunia.com/advisories/45086 http://secunia.com/advisories/45574 http://secunia.com/advisories/48947 http://securitytracker.com/id?1025738 http://www.mandriva.com/security/advisories?nam • CWE-399: Resource Management Errors CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 4.3EPSS: 1%CPEs: 25EXPL: 2CVE-2011-1957 – wireshark: Infinite loop in the DICOM dissector
https://notcve.org/view.php?id=CVE-2011-1957
The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length. La función dissect_dcm_main en epan/dissectors/packet_dcm.c en el disector de DICOM en Wireshark v1.2.x antes de v1.2.17 y v1.4.x antes de v1.4.7 permite a atacantes remotos provocar una denegación de servicio ( bucle infinito ) a través de una longitud de la PDU invalida. • http://anonsvn.wireshark.org/viewvc?view=revision&revision=36958 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html http://openwall.com/lists/oss-security/2011/05/31/20 http://openwall.com/lists/oss-security/2011/06/01/1 http://openwall.com/lists/oss-security/2011/06/01/11 http://secunia.com/adviso • CWE-399: Resource Management Errors CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 4.3EPSS: 0%CPEs: 25EXPL: 0CVE-2011-1958 – (64bit): NULL pointer dereference by processing of a corrupted Diameter dictionary file
https://notcve.org/view.php?id=CVE-2011-1958
Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file. Wireshark v1.2.x antes de v1.2.17 y v1.4.x antes de v1.4.7 permite a atacantes remotos asistidos por el usuario provocar una denegación de servicio ( desreferenciar puntero NULO y bloqueo de la aplicación ) a través de un archivo de diccionario manipulado. • http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html http://openwall.com/lists/oss-security/2011/05/31/20 http://openwall.com/lists/oss-security/2011/06/01/1 http://openwall.com/lists/oss-security/2011/06/01/11 http://rhn.redhat.com/errata/RHSA-2013-0125.html http://secunia.com/advisories/44449 • CWE-476: NULL Pointer Dereference •
CVSS: 4.3EPSS: 0%CPEs: 25EXPL: 2CVE-2011-1959 – wireshark: Stack-based buffer over-read from tvbuff buffer when reading snoop capture files
https://notcve.org/view.php?id=CVE-2011-1959
The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read. La función snoop_read en wiretap/snoop.c de Wireshark v1.2.x antes de v1.2.17 y v1.4.x antes de v1.4.7 no maneja adecuadamente ciertos búfers virtualizables, que permite a atacantes remotos provocar una denegación de servicio ( caída de aplicación) a través de un valor de longitud grande en un archivo de Snoop que desencadena un búfer una sobre-lectura en la pila del búfer. • http://anonsvn.wireshark.org/viewvc?view=revision&revision=37068 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html http://openwall.com/lists/oss-security/2011/05/31/20 http://openwall.com/lists/oss-security/2011/06/01/1 http://openwall.com/lists/oss-security/2011/06/01/11 http://rhn.redhat.com/ • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •