rpm package
opensuse/wireshark&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed
Vulnerabilities (553)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2013-2482 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Mar 7, 2013 | The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. | ||
| CVE-2013-2481 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Mar 7, 2013 | Integer signedness error in the dissect_mount_dirpath_call function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfs_file_name_snooping is enabled, allows remote attackers to cause a denial of service (appl | ||
| CVE-2013-2480 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Mar 7, 2013 | The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet. | ||
| CVE-2013-2479 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Mar 7, 2013 | The dissect_mpls_echo_tlv_dd_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via invalid Sub-tlv data. | ||
| CVE-2013-2478 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Mar 7, 2013 | The dissect_server_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service (application crash) via a malfor | ||
| CVE-2013-2477 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Mar 7, 2013 | The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. | ||
| CVE-2013-2476 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Mar 7, 2013 | The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a packet with a header that is too short. | ||
| CVE-2013-2475 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Mar 7, 2013 | The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet. | ||
| CVE-2013-1590 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet. | ||
| CVE-2013-1589 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet. | ||
| CVE-2013-1588 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | Multiple buffer overflows in the dissect_pft_fec_detailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service (application crash) via a malformed packet | ||
| CVE-2013-1587 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | The dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. | ||
| CVE-2013-1586 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash) via | ||
| CVE-2013-1585 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. | ||
| CVE-2013-1584 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a | ||
| CVE-2013-1583 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malfo | ||
| CVE-2013-1582 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash) vi | ||
| CVE-2013-1581 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed p | ||
| CVE-2013-1580 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinit | ||
| CVE-2013-1579 | — | < 2.2.2-1.1 | 2.2.2-1.1 | Feb 3, 2013 | The rtps_util_add_bitmap function in epan/dissectors/packet-rtps.c in the RTPS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly implement certain nested loops for processing bitmap data, which allows remote attackers to cause a denial of service |
- CVE-2013-2482Mar 7, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
- CVE-2013-2481Mar 7, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
Integer signedness error in the dissect_mount_dirpath_call function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfs_file_name_snooping is enabled, allows remote attackers to cause a denial of service (appl
- CVE-2013-2480Mar 7, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
- CVE-2013-2479Mar 7, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The dissect_mpls_echo_tlv_dd_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via invalid Sub-tlv data.
- CVE-2013-2478Mar 7, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The dissect_server_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service (application crash) via a malfor
- CVE-2013-2477Mar 7, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- CVE-2013-2476Mar 7, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a packet with a header that is too short.
- CVE-2013-2475Mar 7, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- CVE-2013-1590Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- CVE-2013-1589Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- CVE-2013-1588Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
Multiple buffer overflows in the dissect_pft_fec_detailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service (application crash) via a malformed packet
- CVE-2013-1587Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- CVE-2013-1586Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash) via
- CVE-2013-1585Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- CVE-2013-1584Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a
- CVE-2013-1583Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malfo
- CVE-2013-1582Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash) vi
- CVE-2013-1581Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed p
- CVE-2013-1580Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinit
- CVE-2013-1579Feb 3, 2013affected < 2.2.2-1.1fixed 2.2.2-1.1
The rtps_util_add_bitmap function in epan/dissectors/packet-rtps.c in the RTPS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly implement certain nested loops for processing bitmap data, which allows remote attackers to cause a denial of service
Page 24 of 28