Page 3 of 38 results (0.003 seconds)

CVSS: 7.5EPSS: 2%CPEs: 41EXPL: 0

CVE-2008-5285 – wireshark: DoS (infinite loop) in SMTP dissector via large SMTP request

https://notcve.org/view.php?id=CVE-2008-5285

01 Dec 2008 — Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop. Wireshark 1.0.4 y anteriores permite a atacantes remotos causar una denegación de servicio a través de una petición SMTP demasiado larga, lo que ocasiona un bucle infinito. • http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065840.html • CWE-399: Resource Management Errors CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVSS: 7.5EPSS: 2%CPEs: 14EXPL: 0

CVE-2008-3145 – wireshark: crash in the packet reassembling

https://notcve.org/view.php?id=CVE-2008-3145

16 Jul 2008 — The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read. La función fragment_add_work de epan/reassemble.c en Wireshark versiones 0.8.19 hasta la 1.0.1, permite a atacantes remotos provocar una denegación de servicio (caída) a través de series de paquetes fragmentados con valores de desplazamiento de fr... • http://anonsvn.wireshark.org/viewvc/index.py?view=rev&revision=25343 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 2%CPEs: 10EXPL: 1

CVE-2008-3137 – wireshark: crash in the GSM SMS dissector

https://notcve.org/view.php?id=CVE-2008-3137

10 Jul 2008 — The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors. El analizador GSM SMS en Wireshark (anteriormente Ethereal) 0.99.2 a la v1.0.0, permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores desconocidos. • http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 1%CPEs: 11EXPL: 0

CVE-2008-3138 – wireshark: unexpected exit in the PANA and KISMET dissectors

https://notcve.org/view.php?id=CVE-2008-3138

10 Jul 2008 — The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors. Los analizadores (1) PANA y (2) KISMET en Wireshark (conocido como Ethereal) de la 0.99.3 a la v1.0.0, permite a atacantes remotos provocar una denegación de servicio (parada de aplicación) a través de vectores desconocidos. • http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.5EPSS: 1%CPEs: 11EXPL: 0

CVE-2008-3139

https://notcve.org/view.php?id=CVE-2008-3139

10 Jul 2008 — The RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: this might be due to a use-after-free error. El analizador RTMPT en Wireshark (anteriormente Ethereal) 0.99.8 a la v1.0.0, permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores desconocidos. NOTA: esto puede ser debido a un eror "user-after-free" (uso después de liberación). • http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 1

CVE-2008-3141 – wireshark: memory disclosure in the RMI dissector

https://notcve.org/view.php?id=CVE-2008-3141

10 Jul 2008 — Unspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0.0 allows remote attackers to read system memory via unspecified vectors. Vulnerabilidad sin especificar en el analizador RMI en Wireshark (anteriormente Ethereal) de la v0.9.5 a la v1.0.0, permite a atacantes remotos leer la memoria del sistema a través de vectores no especificados. • http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.5EPSS: 1%CPEs: 15EXPL: 0

CVE-2008-1070 – wireshark: SCTP dissector crash

https://notcve.org/view.php?id=CVE-2008-1070

28 Feb 2008 — The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet. El analizador SCTP de Wireshark (anteriormente Ethereal) de 0.99.5 a 0.99.7 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete mal formado. • http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html •

CVSS: 7.5EPSS: 1%CPEs: 15EXPL: 0

CVE-2008-1071 – wireshark: SNMP dissector crash

https://notcve.org/view.php?id=CVE-2008-1071

28 Feb 2008 — The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet. El analizador SNMP de Wireshark (anteriormente Ethereal) 0.99.6 hasta 0.99.7, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete mal formado. • http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 15EXPL: 0

CVE-2008-1072 – wireshark: TFTP dissector crash

https://notcve.org/view.php?id=CVE-2008-1072

28 Feb 2008 — The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug. El TFTP dissector en Wireshark (antes Ethereal) de la v.0.6.0 a la v.0.99.7 ejecutado sobre Ubuntu 7.10, permite a atacantes remotos causar una denegación de servicio (caída o consumo de memoria) a través de un paquete defectuoso, posiblemente en relación al bu... • http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html •

CVSS: 7.5EPSS: 3%CPEs: 69EXPL: 0

CVE-2007-6111 – wireshark mp3 and ncp flaws

https://notcve.org/view.php?id=CVE-2007-6111

23 Nov 2007 — Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector. Múltiples vulnerabilidades no especificadas en Wireshark (formalmente Ethereal) que permiten que atacantes remotos provoquen una denegación de servicio (por caída) usando: (1) un fichero MP3 manipulado, o (2) vectores no especificados en el NCP dissector. • http://bugs.gentoo.org/show_bug.cgi?id=199958 •