CVSS: 4.3EPSS: 0%CPEs: 18EXPL: 0CVE-2012-0068
https://notcve.org/view.php?id=CVE-2012-0068
The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a Novell capture file containing a record that is too small. La función lanalyzer_read en wiretap/lanalyzer.c en versiones de Wireshark 1.4.x, anteriores a la 1.4.11 y versiones 1.6.x, anteriores a la 1.6.5 permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) a través de un fichero de captura Novell, que contiene un registro que es muy pequeño. • http://anonsvn.wireshark.org/viewvc?view=revision&revision=40169 http://secunia.com/advisories/47494 http://secunia.com/advisories/54425 http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml http://www.openwall.com/lists/oss-security/2012/01/11/7 http://www.openwall.com/lists/oss-security/2012/01/20/4 http://www.wireshark.org/security/wnpa-sec-2012-01.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6670 https://oval.cisecurity.org/repository/search/defi • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 17EXPL: 3CVE-2012-0066 – Wireshark: Dos via large buffer allocation request
https://notcve.org/view.php?id=CVE-2012-0066
Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a (1) Accellent 5Views (aka .5vw) file, (2) I4B trace file, or (3) NETMON 2 capture file. Wireshark v1.4.x anteriores a v1.4.11 y v1.6.x anteriores a v1.6.5 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un paquete muy grande en un (1) fichero Accellent 5Views (también conocido como .5vw), (2) fichero de traza I4B, o (3) fichero de captura NETMON 2. • http://anonsvn.wireshark.org/viewvc?view=revision&revision=40165 http://anonsvn.wireshark.org/viewvc?view=revision&revision=40166 http://rhn.redhat.com/errata/RHSA-2013-0125.html http://secunia.com/advisories/47494 http://secunia.com/advisories/48947 http://secunia.com/advisories/54425 http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml http://www.openwall.com/lists/oss-security/2012/01/11/7 http://www.openwall.com/lists/oss-security/2012/01/20/4 http://www • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 17EXPL: 1CVE-2012-0041 – wireshark: multiple file parser vulnerabilities (wnpa-sec-2012-01)
https://notcve.org/view.php?id=CVE-2012-0041
The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file. La función dissect_packet en epan/packet.c en Wireshark v1.4.x anteriores a v1.4.11 y v1.6.x anterior a v1.6.5 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de de un paquete largo en un fichero de captura, como se demostró con fichero airopeek. • http://anonsvn.wireshark.org/viewvc?view=revision&revision=40164 http://rhn.redhat.com/errata/RHSA-2013-0125.html http://secunia.com/advisories/47494 http://secunia.com/advisories/48947 http://secunia.com/advisories/54425 http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml http://www.openwall.com/lists/oss-security/2012/01/11/7 http://www.openwall.com/lists/oss-security/2012/01/20/4 http://www.wireshark.org/security/wnpa-sec-2012-01.html https://bugs. • CWE-20: Improper Input Validation •
CVSS: 2.9EPSS: 0%CPEs: 17EXPL: 1CVE-2012-0042 – wireshark: NULL pointer vulnerabilities (wnpa-sec-2012-02)
https://notcve.org/view.php?id=CVE-2012-0042
Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet, related to epan/to_str.c. Wireshark 1.4.x anteriores a 1.4.11 y 1.6.x anteriores a 1.6.5 no realizan convenientemente determinadas conversiones de cadena ("string"), lo que permite a atacants remotos provocar una denegación de servicio (resolución de puntero nulo y caída de la aplicación) a través de un paquete modificado, relacionado con epan/to_str.c. • http://anonsvn.wireshark.org/viewvc?view=revision&revision=40194 http://rhn.redhat.com/errata/RHSA-2013-0125.html http://secunia.com/advisories/47494 http://secunia.com/advisories/48947 http://secunia.com/advisories/54425 http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml http://www.openwall.com/lists/oss-security/2012/01/11/7 http://www.securitytracker.com/id?1026507 http://www.wireshark.org/security/wnpa-sec-2012-02.html https://bugs.wireshark.org/bugzilla/sh •
CVSS: 4.4EPSS: 0%CPEs: 13EXPL: 0CVE-2011-4102 – wireshark: buffer overflow in the ERF file reader
https://notcve.org/view.php?id=CVE-2011-4102
Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (application crash) via a malformed file. Desbordamiento de buffer de memoria dinámica en en la función erf_read_header en wiretap/erf.c en el analizador de archivos ERF en Wireshark v1.4.0, v1.4.9 y v1.6.x anterior a v1.6.3 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un archivo con formato incorrecto. • http://anonsvn.wireshark.org/viewvc?view=revision&revision=39508 http://openwall.com/lists/oss-security/2011/11/01/9 http://osvdb.org/76770 http://rhn.redhat.com/errata/RHSA-2013-0125.html http://secunia.com/advisories/46644 http://secunia.com/advisories/46913 http://secunia.com/advisories/48947 http://www.securityfocus.com/bid/50486 http://www.wireshark.org/security/wnpa-sec-2011-19.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6479 https://bugzilla.re • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •