CVSS: 2.9EPSS: 0%CPEs: 18EXPL: 0CVE-2013-1580
https://notcve.org/view.php?id=CVE-2013-1580
The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. La función dissect_cmstatus_tlv en plugins/docsis/packet-cmstatus.c en el DOCSIS CM-STATUS dissector en Wireshark v1.6.x anterior a v1.6.13 y v1.8.x anterior a v1.8.5 usa un tipo de datos incorrecto para una variable de posición, permitiendo a atacantes remotos provocar una denegación de servicio (bucle) a través de un paquete malformado. • http://anonsvn.wireshark.org/viewvc/trunk/plugins/docsis/packet-cmstatus.c?r1=47045&r2=47044&pathrev=47045 http://anonsvn.wireshark.org/viewvc?view=revision&revision=47045 http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html http://www.wireshark.org/security/wnpa-sec-2013-01.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8199 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef • CWE-20: Improper Input Validation •
CVSS: 2.9EPSS: 0%CPEs: 18EXPL: 0CVE-2013-1574
https://notcve.org/view.php?id=CVE-2013-1574
The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. La función dissect_bthci_eir_ad_data en epan/dissectors/packet-bthci_cmd.c en el dissector Bluetooth HCI en Wireshark v1.6.x anterior a v1.6.13 y v1.8.x anterior a v1.8.5 usa un tipo de datos incorrectos para una variable contador, permitiendo a atacantes remotos causar una denegación de servicio (loop infinito) mediante un paquete malformado. • http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-bthci_cmd.c?r1=46345&r2=46344&pathrev=46345 http://anonsvn.wireshark.org/viewvc?view=revision&revision=46345 http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html http://www.wireshark.org/security/wnpa-sec-2013-01.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8038 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3A • CWE-20: Improper Input Validation •
CVSS: 2.9EPSS: 0%CPEs: 18EXPL: 0CVE-2013-1587
https://notcve.org/view.php?id=CVE-2013-1587
The dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. La función dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c en el disector ROHC en Wireshark v1.8.x antes de v1.8.5 no maneja adecuadamente los perfiles desconocidos, lo que permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un paquete mal formado. • http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rohc.c?r1=44700&r2=44699&pathrev=44700 http://anonsvn.wireshark.org/viewvc?view=revision&revision=44700 http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html http://www.wireshark.org/security/wnpa-sec-2013-06.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7679 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3 •
CVSS: 2.9EPSS: 0%CPEs: 18EXPL: 0CVE-2013-1576
https://notcve.org/view.php?id=CVE-2013-1576
The dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. La función dissect_sdp_media_attribute en epan/dissectors/packet-sdp.c en el dissector SDP en Wireshark v1.6.x anterior a v1.6.13 y v1.8.x anterior a v1.8.5 no procesa correctamente parámetros cripto-suite, permitiendo a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un paquete malformado. • http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sdp.c?r1=46344&r2=46343&pathrev=46344 http://anonsvn.wireshark.org/viewvc?view=revision&revision=46344 http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html http://www.wireshark.org/security/wnpa-sec-2013-01.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8041 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A • CWE-310: Cryptographic Issues •
CVSS: 2.9EPSS: 0%CPEs: 18EXPL: 0CVE-2013-1583
https://notcve.org/view.php?id=CVE-2013-1583
The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. La función dissect_version_4_primary_header en epan/dissectors/packet-dtn.c en el dissector DTN en Wireshark v1.6.x anterior a v1.6.13 y v1.8.x anterior a v1.8.5 accede a un puntero inapropiado, lo que permite a atacantes remotos causar una denegación de servicio (caída de la aplicación) mediante un paquete malformado. • http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dtn.c?r1=46577&r2=46576&pathrev=46577 http://anonsvn.wireshark.org/viewvc?view=revision&revision=46577 http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html http://www.wireshark.org/security/wnpa-sec-2013-03.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7945 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A • CWE-20: Improper Input Validation •