Page 9 of 127 results (0.012 seconds)

CVSS: 5.9EPSS: 0%CPEs: 12EXPL: 0

CVE-2016-4421

https://notcve.org/view.php?id=CVE-2016-4421

01 May 2016 — epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (deep recursion, stack consumption, and application crash) via a packet that specifies deeply nested data. epan/dissectors/packet-ber.c en el disector ASN.1 BER en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.x en versiones anteriores a 2.0.2 permite a atacantes remotos provocar una denegación de servicio (recursión profunda, consumo d... • http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html • CWE-20: Improper Input Validation •

CVSS: 5.9EPSS: 0%CPEs: 16EXPL: 0

CVE-2016-4079 – Debian Security Advisory 3585-1

https://notcve.org/view.php?id=CVE-2016-4079

25 Apr 2016 — epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via a crafted packet. epan/dissectors/packet-pktc.c en el disector PKTC en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 no verifica identificadores BER, lo que permite a atacantes remotos provocar una denegación de servi... • http://www.debian.org/security/2016/dsa-3585 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.9EPSS: 0%CPEs: 14EXPL: 0

CVE-2016-4006 – Debian Security Advisory 3585-1

https://notcve.org/view.php?id=CVE-2016-4006

25 Apr 2016 — epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause a denial of service (stack memory consumption and application crash) via a crafted packet. epan/proto.c en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 no limita la profundidad de árbol de protocolo, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de memoria de pila y caída de aplica... • http://www.debian.org/security/2016/dsa-3585 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.9EPSS: 0%CPEs: 3EXPL: 0

CVE-2016-4076

https://notcve.org/view.php?id=CVE-2016-4076

25 Apr 2016 — epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. epan/dissectors/packet-ncp2222.inc en el disector NCP en Wireshark 2.0.x en versiones anteriores a 2.0.3 no inicializa correctamente la memoria para patrones de búsqueda, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a ... • http://www.securitytracker.com/id/1035685 • CWE-284: Improper Access Control •

CVSS: 5.9EPSS: 0%CPEs: 14EXPL: 0

CVE-2016-4078

https://notcve.org/view.php?id=CVE-2016-4078

25 Apr 2016 — The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted packet, related to epan/dissectors/packet-capwap.c and epan/dissectors/packet-ieee80211.c. El disector IEEE 802.11 en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 no restringe adecuadamente listas de elementos, lo que permite a ... • http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html • CWE-20: Improper Input Validation •

CVSS: 5.9EPSS: 0%CPEs: 14EXPL: 0

CVE-2016-4080 – Debian Security Advisory 3585-1

https://notcve.org/view.php?id=CVE-2016-4080

25 Apr 2016 — epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. epan/dissectors/packet-pktc.c en el disector PKTC en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 malinterpreta campos de fecha y hora, lo que permite a atacantes remotos provocar una denegación de servic... • http://www.debian.org/security/2016/dsa-3585 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.9EPSS: 0%CPEs: 16EXPL: 0

CVE-2016-4082 – Debian Security Advisory 3585-1

https://notcve.org/view.php?id=CVE-2016-4082

25 Apr 2016 — epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service (out-of-bounds access and application crash) via a crafted packet. epan/dissectors/packet-gsm_cbch.c en el disector GSM CBCH en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 utiliza la variable incorrecta para indexar un array, lo que permite a at... • http://www.debian.org/security/2016/dsa-3585 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.9EPSS: 0%CPEs: 16EXPL: 0

CVE-2016-4085 – Debian Security Advisory 3585-1

https://notcve.org/view.php?id=CVE-2016-4085

25 Apr 2016 — Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long string in a packet. Desbordamiento de buffer basado en pila en epan/dissectors/packet-ncp2222.inc en el disector NCP en Wireshark 1.12.x en versiones anteriores a 1.12.11 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posib... • http://www.debian.org/security/2016/dsa-3585 • CWE-20: Improper Input Validation •

CVSS: 5.9EPSS: 0%CPEs: 3EXPL: 0

CVE-2016-4083

https://notcve.org/view.php?id=CVE-2016-4083

25 Apr 2016 — epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not ensure that data is available before array allocation, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. epan/dissectors/packet-mswsp.c en el disector MS-WSP en Wireshark 2.0.x en versiones anteriores a 2.0.3 no asegura que los datos estén disponibles antes de la asignación de memoria de un array, lo que permite a atacantes remotos provocar una denegación de serv... • http://www.securitytracker.com/id/1035685 • CWE-20: Improper Input Validation •

CVSS: 5.9EPSS: 0%CPEs: 3EXPL: 1

CVE-2016-4077

https://notcve.org/view.php?id=CVE-2016-4077

25 Apr 2016 — epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case handling of truncated Tvb data structures, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet. epan/reassemble.c en TShark en Wireshark 2.0.x en versiones anteriores a 2.0.3 confía en el manejo incorrecto de casos especiales de estructuras de datos Tvb truncadas, lo que permite a atacantes remotos provocar una denegación de servicio (uso después de ... • http://www.securitytracker.com/id/1035685 •