CVSS: 4.3EPSS: 0%CPEs: 8EXPL: 0CVE-2008-6472 – wireshark: DoS vulnerability in WLCCP dissector
https://notcve.org/view.php?id=CVE-2008-6472
The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors. El disector WLCCP en Wireshark 0.99.7 hasta la versión 1.0.4 permite a atacantes remotos provocar una denegación de servicio (con un bucle infinito) a través de vectores no especificados. • http://secunia.com/advisories/32840 http://secunia.com/advisories/34144 http://www.mandriva.com/security/advisories?name=MDVSA-2008:242 http://www.redhat.com/support/errata/RHSA-2009-0313.html http://www.wireshark.org/security/wnpa-sec-2008-07.html https://exchange.xforce.ibmcloud.com/vulnerabilities/47292 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6223 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9629 https:/ • CWE-399: Resource Management Errors •
CVSS: 2.1EPSS: 0%CPEs: 12EXPL: 0CVE-2009-0601
https://notcve.org/view.php?id=CVE-2009-0601
Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable. Una vulnerabilidad de formato de cadena en Wireshark 0.99.8 a 1.0.5 sobre plataformas No-Windows permite a usuarios locales provocar una denegación de servicio (con cuelgue de la aplicacion) a través de especificadores de formato de cadena en la variable de entorno HOME. • http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html http://secunia.com/advisories/34264 http://wiki.rpath.com/Advisories:rPSA-2009-0040 http://www.securityfocus.com/archive/1/501763/100/0/threaded http://www.securityfocus.com/bid/33690 http://www.securitytracker.com/id?1021697 http://www.vupen.com/english/advisories/2009/0370 http://www.wireshark.org/security/wnpa-sec-2009-01.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3150 https://issue • CWE-134: Use of Externally-Controlled Format String •
CVSS: 6.8EPSS: 1%CPEs: 9EXPL: 1CVE-2009-0599 – wireshark: buffer overflows in NetScreen snoop file reader
https://notcve.org/view.php?id=CVE-2009-0599
Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file. Desbordamiento de búfer en wiretap/netscreen.c en Wireshark v0.99.7 hasta v1.0.5 permite a usuarios remotos asistidos por usuarios locales, provocar una denegación de servicio (caída de la aplicación) a través de un fichero snoop NetScreen mal formado. • http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html http://osvdb.org/51815 http://secunia.com/advisories/33872 http://secunia.com/advisories/34144 http://secunia.com/advisories/34264 http://secunia.com/advisories/34344 http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm http://wiki.rpath.com/Advisories:rPSA-2009-0040 http://www.redhat.com/support/errata/RHSA-2009-0313.html http://www.securityfocus.com/archive/1/501763/100/0/threaded http:/ • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.3EPSS: 0%CPEs: 11EXPL: 1CVE-2009-0600 – wireshark: denial of service (application crash) via a crafted Tektronix K12 text capture file
https://notcve.org/view.php?id=CVE-2009-0600
Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame. Wireshark 0.99.6 a 1.0.5 permite causar, a atacantes remotos con la ayuda de usuarios, una denegación de servicio (con cuelgue de la aplicación) a través de un fichero de captura Tektronix K12 debidamente modificado, como lo demuestra un archivo con un solo marco. • http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html http://secunia.com/advisories/33872 http://secunia.com/advisories/34144 http://secunia.com/advisories/34264 http://secunia.com/advisories/34344 http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm http://wiki.rpath.com/Advisories:rPSA-2009-0040 http://www.redhat.com/support/errata/RHSA-2009-0313.html http://www.securityfocus.com/archive/1/501763/100/0/threaded http://www.securityfocus.com/bid/ • CWE-20: Improper Input Validation •
CVSS: 5.0EPSS: 0%CPEs: 41EXPL: 0CVE-2008-5285 – wireshark: DoS (infinite loop) in SMTP dissector via large SMTP request
https://notcve.org/view.php?id=CVE-2008-5285
Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop. Wireshark 1.0.4 y anteriores permite a atacantes remotos causar una denegación de servicio a través de una petición SMTP demasiado larga, lo que ocasiona un bucle infinito. • http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065840.html http://secunia.com/advisories/32840 http://secunia.com/advisories/34144 http://securityreason.com/securityalert/4663 http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm http://wiki.rpath.com/Advisories:rPSA-2008-0336 http://www.mandriva.com/security/advisories?name=MDVSA-2008:242 http://www.openwall.com/lists/oss-security/2008/11/24/1 http://www.redhat.com/support/errata/RHSA-2009-0313.html h • CWE-399: Resource Management Errors CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •