Debian Wireshark vulnerabilities

CVE-2023-5371 [MEDIUM] CVE-2023-5371: wireshark - RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allow... RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file Scope: local bookworm: resolved (fixed in 4.0.11-1~deb12u1) bullseye: resolved forky: resolved (fixed in 4.0.10-1) sid: resolved (fixed in 4.0.10-1) trixie: resolved (fixed in 4.0.10-1)

CVE-2020-26421 [MEDIUM] CVE-2020-26421: wireshark - Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3... Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. Scope: local bookworm: resolved (fixed in 3.4.1-1) bullseye: resolved (fixed in 3.4.1-1) forky: resolved (fixed in 3.4.1-1) sid: resolved (fixed in 3.4.1-1) trixie: resolved (fixed in 3.4.1

CVE-2016-5352 [MEDIUM] CVE-2016-5352: wireshark - epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4... epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.4+gdd7746e-1) bullseye: resolved (fixed in 2.0.4+gdd7746e-1) forky: resolved (fixed in 2.0.4+gdd7746e-1)

CVE-2016-7176 [MEDIUM] CVE-2016-7176: wireshark - epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0... epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.2.0~rc1+g438c022-1) bullseye: resolved (fixed in 2.2.0

CVE-2016-5357 [MEDIUM] CVE-2016-5357: wireshark - wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12... wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 2.0.4+gdd7746e-1) bullseye: resolved (fixed in 2.0.4+gdd7746e-1) forky: r

CVE-2016-5355 [MEDIUM] CVE-2016-5355: wireshark - wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 ... wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 2.0.4+gdd7746e-1) bullseye: resolved (fixed in 2.0.4+gdd7746e-1) forky: resol

CVE-2016-5356 [MEDIUM] CVE-2016-5356: wireshark - wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 an... wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 2.0.4+gdd7746e-1) bullseye: resolved (fixed in 2.0.4+gdd7746e-1) forky: resolve

CVE-2016-4082 [MEDIUM] CVE-2016-4082: wireshark - epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x ... epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service (out-of-bounds access and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.3+geed34f0-1) bullseye: resolved

CVE-2016-5353 [MEDIUM] CVE-2016-5353: wireshark - epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x be... epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.4+gdd7746e-1) bullseye: resolved (fixed in 2.0.4+gdd7746e-1) forky: re

CVE-2013-4082 [MEDIUM] CVE-2013-4082: wireshark - The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wir... The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between a record length and a trailer length, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.

CVE-2016-7178 [MEDIUM] CVE-2016-7178: wireshark - epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x befor... epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.2.0~rc1+g438c022-1) bullseye: resolved

CVE-2016-4080 [MEDIUM] CVE-2016-4080: wireshark - epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1... epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.3+geed34f0-1) bullseye: resolved (fixed in 2.0.3+geed34f0-

CVE-2016-6509 [MEDIUM] CVE-2016-6509: wireshark - epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1... epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.5+ga3be9c6-1) bullseye: resolved (fixed in 2.0.5+ga3be9c6-1) forky: resolved (fixed i

CVE-2020-26418 [LOW] CVE-2020-26418: wireshark - Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 al... Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. Scope: local bookworm: resolved (fixed in 3.4.1-1) bullseye: resolved (fixed in 3.4.1-1) forky: resolved (fixed in 3.4.1-1) sid: resolved (fixed in 3.4.1-1) trixie: resolved (fixed in 3.4.1-1)

CVE-2016-2526 [MEDIUM] CVE-2016-2526: wireshark - epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x befor... epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.2+ga16e22e-1) bullseye: resolved (fixed in 2.0.2+ga16e22e-1) forky: resolve

CVE-2020-26419 [LOW] CVE-2020-26419: wireshark - Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service... Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file. Scope: local bookworm: resolved (fixed in 3.4.1-1) bullseye: resolved (fixed in 3.4.1-1) forky: resolved (fixed in 3.4.1-1) sid: resolved (fixed in 3.4.1-1) trixie: resolved (fixed in 3.4.1-1)

CVE-2016-2524 [MEDIUM] CVE-2016-2524: wireshark - epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x befo... epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.2+ga16e22e-1) bullseye: resolved (fixed in 2.0.2+ga16e22e-1) forky: resolved (fixed in 2.0.2+ga16e22e

CVE-2016-4083 [MEDIUM] CVE-2016-4083: wireshark - epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before... epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not ensure that data is available before array allocation, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.3+geed34f0-1) bullseye: resolved (fixed in 2.0.3+geed34f0-1) forky:

CVE-2015-4651 [MEDIUM] CVE-2015-4651: wireshark - The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c... The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing IP address strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (

CVE-2016-4416 [MEDIUM] CVE-2016-4416: wireshark - epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x... epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.2 mishandles the Grouping subfield, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.2+ga16e22e-1) bullseye: resolved (fixed in 2.0.2+ga16e22e-1) forky: re