Debian Wireshark vulnerabilities

CVE-2014-8711 [MEDIUM] CVE-2014-8711: wireshark - Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissecto... Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a packet. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-2) bullseye: resolved (fixed in 1.12.1+g01b65bf-2) fo

CVE-2014-8712 [MEDIUM] CVE-2014-8712: wireshark - The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP ... The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-2) bullsey

CVE-2014-6429 [MEDIUM] CVE-2014-6429: wireshark - The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file pa... The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-1) bullseye: resolved

CVE-2015-3811 [MEDIUM] CVE-2015-3811: wireshark - epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.1... epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, a different vulnerability than CVE-2015-2188. Scope: local bookworm: resolved (fixed in 1.12.5+g5819e5b-1)

CVE-2013-4925 [MEDIUM] CVE-2013-4925: wireshark - Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISy... Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.1-1) bullseye: resolved (fixed in 1.10.1-1) forky: resolved (fixed in

CVE-2012-6054 [MEDIUM] CVE-2012-6054: wireshark - The dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in... The dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type, which allows remote attackers to cause a denial of service (infinite loop) via a packet that is neither IPv4 nor IPv6. Scope: local bookworm: resolved (fixe

CVE-2015-0564 [MEDIUM] CVE-2015-0564: wireshark - Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ss... Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-

CVE-2015-2187 [MEDIUM] CVE-2015-2187: wireshark - The dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.... The dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12.4 does not properly follow the TRY/ENDTRY code requirements, which allows remote attackers to cause a denial of service (stack memory corruption and application crash) via a crafted packet. Scope: local bookworm: resolved (fi

CVE-2014-6426 [MEDIUM] CVE-2014-6426: wireshark - The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissecto... The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle a NULL tree, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-1) bullseye: resolved (fixed in 1.12.1+g01b65bf-1) forky:

CVE-2009-2563 [HIGH] CVE-2009-2563: wireshark - Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through... Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote attackers to cause a denial of service (crash) via unknown vectors. Scope: local bookworm: resolved (fixed in 1.2.1-1) bullseye: resolved (fixed in 1.2.1-1) forky: resolved (fixed in 1.2.1-1) sid: resolved (fixed in 1.2.1-1) tr

CVE-2020-7045 [MEDIUM] CVE-2020-7045: wireshark - In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addr... In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes. Scope: local bookworm: resolved (fixed in 3.2.0-1) bullseye: resolved (fixed in 3.2.0-1) forky: resolved (fixed in 3.2.0-1) sid: resolved (fixed in 3.2.0-1) trixie: resolved (fixed in 3.2.0-1)

CVE-2016-5358 [MEDIUM] CVE-2016-5358: wireshark - epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before... epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.4+gdd7746e-1) bullseye: resolved (fixed in 2.0.4+gdd7746e-1) forky: resolved (fixed in 2.0.4

CVE-2016-4084 [MEDIUM] CVE-2016-4084: wireshark - Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissect... Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a denial of service (integer overflow and application crash) via a crafted packet that triggers an unexpected array size. Scope: local bookworm: resolved (fixed in 2.0.3+geed34f0-1) bullseye: resolved (fixed in 2.0.3+g

CVE-2016-7180 [MEDIUM] CVE-2016-7180: wireshark - epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x... epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.2.0~rc1+g438c022-1) bullseye: resolved (fixed in 2.

CVE-2016-6513 [MEDIUM] CVE-2016-6513: wireshark - epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.... epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.5+ga3be9c6-1) bullseye: resolved (fixed in 2.0.5+ga3be9c6-1) forky: resolved (fixed in 2.0.5+ga3

CVE-2020-26420 [LOW] CVE-2020-26420: wireshark - Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 all... Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. Scope: local bookworm: resolved (fixed in 3.4.1-1) bullseye: resolved (fixed in 3.4.1-1) forky: resolved (fixed in 3.4.1-1) sid: resolved (fixed in 3.4.1-1) trixie: resolved (fixed in 3.4.1-1)

CVE-2016-4076 [MEDIUM] CVE-2016-4076: wireshark - epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x befor... epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.3+geed34f0-1) bullseye: resolved (fixed in 2.0.3+geed34f0-1) forky: resolv

CVE-2014-5163 [MEDIUM] CVE-2014-5163: wireshark - The APN decode functionality in (1) epan/dissectors/packet-gtp.c and (2) epan/di... The APN decode functionality in (1) epan/dissectors/packet-gtp.c and (2) epan/dissectors/packet-gsm_a_gm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (f

CVE-2016-4417 [MEDIUM] CVE-2016-4417: wireshark - Off-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML d... Off-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet that triggers a 0xff tag value. Scope: local bookworm: resolved (fixed in 2.0.2+ga16e22e-1) bullseye: reso

CVE-2016-4418 [MEDIUM] CVE-2016-4418: wireshark - epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x befo... epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet that triggers an empty set. Scope: local bookworm: resolved (fixed in 2.0.2+ga16e22e-1) bullseye: resolved (fixed in 2.0.2+ga16e22e-1) fork