wireshark Vulnerability Advisory Catalog

Total 695 security vulnerabilities recorded for wireshark software and firmware.

← Back to All Vendors
CVE-2016-4418 MEDIUM
Component: wireshark

epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a den...

📅 2016-05-01
CVSS 5.9 Dossier →
CVE-2016-4417 MEDIUM
Component: wireshark

Off-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allow...

📅 2016-05-01
CVSS 5.9 Dossier →
CVE-2016-4416 MEDIUM
Component: wireshark

epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.2 mishandles the Grouping subfield, which allows remote at...

📅 2016-05-01
CVSS 5.9 Dossier →
CVE-2016-4415 MEDIUM
Component: wireshark

wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attack...

📅 2016-05-01
CVSS 5.9 Dossier →
CVE-2016-4084 MEDIUM
Component: wireshark

Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a ...

📅 2016-04-25
CVSS 5.9 Dossier →
CVE-2016-4083 MEDIUM
Component: wireshark

epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not ensure that data is available before array allocation,...

📅 2016-04-25
CVSS 5.9 Dossier →
CVE-2016-4082 MEDIUM
Component: wireshark

epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index...

📅 2016-04-25
CVSS 5.9 Dossier →
CVE-2016-4081 MEDIUM
Component: wireshark

epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an incorrect integer data type, whi...

📅 2016-04-25
CVSS 5.9 Dossier →
CVE-2016-4080 MEDIUM
Component: wireshark

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows...

📅 2016-04-25
CVSS 5.9 Dossier →
CVE-2016-4078 MEDIUM
Component: wireshark

The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote atta...

📅 2016-04-25
CVSS 5.9 Dossier →
CVE-2016-4077 MEDIUM
Component: wireshark

epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case handling of truncated Tvb data structures, which allows r...

📅 2016-04-25
CVSS 5.9 Dossier →
CVE-2016-4076 MEDIUM
Component: wireshark

epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which...

📅 2016-04-25
CVSS 5.9 Dossier →
CVE-2016-4006 MEDIUM
Component: wireshark

epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause ...

📅 2016-04-25
CVSS 5.9 Dossier →
CVE-2016-2532 MEDIUM
Component: wireshark

The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 ...

📅 2016-02-28
CVSS 5.9 Dossier →
CVE-2016-2531 MEDIUM
Component: wireshark

Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attacker...

📅 2016-02-28
CVSS 5.9 Dossier →
CVE-2016-2530 MEDIUM
Component: wireshark

The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mi...

📅 2016-02-28
CVSS 5.9 Dossier →
CVE-2016-2529 MEDIUM
Component: wireshark

The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may...

📅 2016-02-28
CVSS 5.5 Dossier →
CVE-2016-2528 MEDIUM
Component: wireshark

The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length value...

📅 2016-02-28
CVSS 5.9 Dossier →
CVE-2016-2527 MEDIUM
Component: wireshark

wiretap/nettrace_3gpp_32_423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is presen...

📅 2016-02-28
CVSS 5.5 Dossier →
CVE-2016-2526 MEDIUM
Component: wireshark

epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers...

📅 2016-02-28
CVSS 5.9 Dossier →
CVE-2016-2525 MEDIUM
Component: wireshark

epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote a...

📅 2016-02-28
CVSS 5.9 Dossier →
CVE-2016-2524 MEDIUM
Component: wireshark

epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to...

📅 2016-02-28
CVSS 5.9 Dossier →
CVE-2016-2523 MEDIUM
Component: wireshark

The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 al...

📅 2016-02-28
CVSS 5.9 Dossier →
CVE-2016-2522 MEDIUM
Component: wireshark

The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not ver...

📅 2016-02-28
CVSS 5.9 Dossier →
Page 16 of 29 (695 Total Records)