CVSS: 5.0EPSS: 1%CPEs: 9EXPL: 1CVE-2014-5164
https://notcve.org/view.php?id=CVE-2014-5164
The rlc_decode_li function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. La función rlc_decode_li en epan/dissectors/packet-rlc.c en el diseccionados de RLC en Wireshark 1.10.x anterior a 1.10.9 inicializa cierto miembro de estructuras solamente después de que este miembro se haya utilizado, lo que permite a atacantes remotos causar una denegación de servicio (caída de la aplicación) a través de un paquete manipulado. • http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html http://lists.opensuse.org/opensuse-updates/2014-08/msg00025.html http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html http://secunia.com/advisories/57593 http://www.debian.org/security/2014/dsa-3002 http://www.wireshark.org/security/wnpa-sec-2014-10.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9795 https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ba6eb5c72ffe82ca0e51c7083 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 1%CPEs: 9EXPL: 1CVE-2014-5163
https://notcve.org/view.php?id=CVE-2014-5163
The APN decode functionality in (1) epan/dissectors/packet-gtp.c and (2) epan/dissectors/packet-gsm_a_gm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. La funcionalidad APN decode en (1) epan/dissectors/packet-gtp.c y (2) epan/dissectors/packet-gsm_a_gm.c en los diseccionadores de GTP y GSM Management en Wireshark 1.10.x anterior a 1.10.9 no inicializa completemente cierto buffer, lo que permite a atacantes remotos causar una denegación de servicio (caída de la aplicación) a través de un paquete manipulado. • http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html http://lists.opensuse.org/opensuse-updates/2014-08/msg00025.html http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html http://secunia.com/advisories/57593 http://www.debian.org/security/2014/dsa-3002 http://www.wireshark.org/security/wnpa-sec-2014-09.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10216 https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3fc441e7a5008640c68ec985 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 0%CPEs: 9EXPL: 0CVE-2014-5162
https://notcve.org/view.php?id=CVE-2014-5162
The read_new_line function in wiretap/catapult_dct2000.c in the Catapult DCT2000 dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' and '\r' characters, which allows remote attackers to cause a denial of service (off-by-one buffer underflow and application crash) via a crafted packet. La función read_new_line en wiretap/catapult_dct2000.c en el diseccionador Catapult DCT2000 en Wireshark 1.10.x anterior a 1.10.9 no elimina debidamente los caracteres '\n' y '\r', lo que permite a atacantes remotos causar una denegación de servicio (subdesbordamiento de buffer de superación de limite y caída de la aplicación) a través de un paquete manipulado. • http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html http://lists.opensuse.org/opensuse-updates/2014-08/msg00025.html http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html http://secunia.com/advisories/57593 http://www.debian.org/security/2014/dsa-3002 http://www.wireshark.org/security/wnpa-sec-2014-08.html https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=16f8ba1bed579344df373bf38fff552ab8baf380 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.3EPSS: 1%CPEs: 8EXPL: 2CVE-2014-4020
https://notcve.org/view.php?id=CVE-2014-4020
The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negative integer as a length value even though it was intended to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. La función dissect_frame en epan/dissectors/packet-frame.c en el marco metadissector en Wireshark 1.10.x anterior a 1.10.8 interpreta un entero negativo como un valor de longitud aunque la intención era de representar una condición de error, lo que permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de un paquete manipulado. • http://lists.opensuse.org/opensuse-updates/2014-06/msg00049.html http://www.wireshark.org/security/wnpa-sec-2014-07.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10030 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9999 https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beb119f911a698d44f4baa06d888bb1e775983bc • CWE-189: Numeric Errors •