Page 7 of 127 results (0.002 seconds)

CVSS: 5.9EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-6507 – Debian Security Advisory 3648-1

https://notcve.org/view.php?id=CVE-2016-6507

06 Aug 2016 — epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. epan/dissectors/packet-mmse.c en el disector MMSE en Wireshark 1.12.x en versiones anteriores a 1.12.13 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un paquete manipulado. Multiple vulnerabilities were discovered in the dissectors for NDS, PacketBB, WSP, MMSE, RLC, LDSS, RLC and OpenFl... • http://openwall.com/lists/oss-security/2016/07/28/3 • CWE-399: Resource Management Errors •

CVSS: 5.9EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-6508 – Debian Security Advisory 3648-1

https://notcve.org/view.php?id=CVE-2016-6508

06 Aug 2016 — epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (large loop) via a crafted packet. epan/dissectors/packet-rlc.c en el disector RLC en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 utiliza un tipo de datos de entero incorrecto, lo que permite a atacantes remotos provocar una denegación de servicio (bucle grande) a ... • http://openwall.com/lists/oss-security/2016/07/28/3 • CWE-399: Resource Management Errors •

CVSS: 5.9EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-6509 – Debian Security Advisory 3648-1

https://notcve.org/view.php?id=CVE-2016-6509

06 Aug 2016 — epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. epan/dissectors/packet-ldss.c en el disector LDSS en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 no maneja adecuadamente conversaciones, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a ... • http://openwall.com/lists/oss-security/2016/07/28/3 • CWE-20: Improper Input Validation •

CVSS: 5.9EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-6510 – Debian Security Advisory 3648-1

https://notcve.org/view.php?id=CVE-2016-6510

06 Aug 2016 — Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet. Error por un paso en epan/dissectors/packet-rlc.c en el disector RLC en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer basado en... • http://openwall.com/lists/oss-security/2016/07/28/3 • CWE-189: Numeric Errors •

CVSS: 5.9EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-6511 – Debian Security Advisory 3648-1

https://notcve.org/view.php?id=CVE-2016-6511

06 Aug 2016 — epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet. epan/proto.c en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 permite a atacantes remotos provocar una denegación de servicio (bucle grande de disector OpenFlow) a través de un paquete manipulado. Multiple vulnerabilities were discovered in the dissectors for NDS, PacketBB, WSP, MMSE, RLC, LD... • http://openwall.com/lists/oss-security/2016/07/28/3 • CWE-399: Resource Management Errors •

CVSS: 5.9EPSS: 2%CPEs: 5EXPL: 1

CVE-2016-6512 – Wireshark 2.0.0 < 2.0.4 - MMSE / WAP / WBXML / WSP Dissectors Denial of Service

https://notcve.org/view.php?id=CVE-2016-6512

06 Aug 2016 — epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors. epan/dissectors/packet-wap.c in Wireshark 2.x en versiones anteriores a 2.0.5 omite una comprobación de desbordamiento en la función tvb_get_guintvar, lo que permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a trav... • https://www.exploit-db.com/exploits/40195 • CWE-20: Improper Input Validation •

CVSS: 5.9EPSS: 0%CPEs: 5EXPL: 0

CVE-2016-6513

https://notcve.org/view.php?id=CVE-2016-6513

06 Aug 2016 — epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. epan/dissectors/packet-wbxml.c en el disector WBXML en Wireshark 2.x en versiones anteriores a 2.0.5 no restringe la profundidad de repercusión, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado. • http://openwall.com/lists/oss-security/2016/07/28/3 • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 0

CVE-2016-5350 – Debian Security Advisory 3615-1

https://notcve.org/view.php?id=CVE-2016-5350

02 Jul 2016 — epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. epan/dissectors/packet-dcerpc-spoolss.c en el componente SPOOLS en Wireshark 1.12.x en versiones anteriores a 1.12.12 y 2.x en versiones anteriores a 2.0.4 no maneja correctamente offsets no esperados, lo que permite a atacantes remotos provocar una denegación de ... • http://www.debian.org/security/2016/dsa-3615 • CWE-399: Resource Management Errors •

CVSS: 5.9EPSS: 0%CPEs: 16EXPL: 1

CVE-2016-5351 – Debian Security Advisory 3615-1

https://notcve.org/view.php?id=CVE-2016-5351

02 Jul 2016 — epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. epan/crypt/airpdcap.c en el disector IEEE 802.11 en Wireshark 1.12.x en versiones anteriores a 1.12.12 y 2.x en versiones anteriores a 2.0.4 no maneja correctamente la falta de una EAPOL_RSN_KEY, lo que permite a atacantes remotos provocar una denegación de servi... • http://www.debian.org/security/2016/dsa-3615 • CWE-20: Improper Input Validation •

CVSS: 5.9EPSS: 0%CPEs: 16EXPL: 0

CVE-2016-5353 – Debian Security Advisory 3615-1

https://notcve.org/view.php?id=CVE-2016-5353

02 Jul 2016 — epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. epan/dissectors/packet-umts_fp.c en el disector UMTS FP en Wireshark 1.12.x en versiones anteriores a 1.12.12 y 2.x en versiones anteriores a 2.0.4 no maneja correctamente el valor reservado C/T, lo que permite a atacantes remotos provocar una denegación de serv... • http://www.debian.org/security/2016/dsa-3615 • CWE-20: Improper Input Validation •