Debian Wireshark vulnerabilities

CVE-2016-7175 [MEDIUM] CVE-2016-7175: wireshark - epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x befor... epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.2.0~rc1+g438c022-1) bullseye: resolved (fixed in 2.2.0~rc1+g438c022-1) forky: res

CVE-2012-5240 [MEDIUM] CVE-2012-5240: wireshark - Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in t... Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malformed packet. Scope: local bookworm: resolved (fixed in 1.8.2-2) bullseye: resolved (fixed in 1.8.2-2) forky: re

CVE-2013-4083 [MEDIUM] CVE-2013-4083: wireshark - The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI di... The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.0-1) bullseye:

CVE-2014-6428 [MEDIUM] CVE-2014-6428: wireshark - The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector i... The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-1) bullseye: resolved (fixed

CVE-2014-8710 [MEDIUM] CVE-2014-8710: wireshark - The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UD... The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-2) bullseye: resolved (fixed in 1.12.1+g01b65bf-2) forky: resolv

CVE-2014-6430 [MEDIUM] CVE-2014-6430: wireshark - The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file pa... The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-1) bullseye: resolved (fixed in

CVE-2014-6432 [MEDIUM] CVE-2014-6432: wireshark - The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file pa... The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operations, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-1) bull

CVE-2013-4923 [MEDIUM] CVE-2013-4923: wireshark - Memory leak in the dissect_dcom_ActivationProperties function in epan/dissectors... Memory leak in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (memory consumption) via crafted packets. Scope: local bookworm: resolved (fixed in 1.10.1-1) bullseye: resolved (fixed in 1.10.1-1) forky

CVE-2014-6424 [MEDIUM] CVE-2014-6424: wireshark - The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the ... The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 refers to incorrect offset and start variables, which allows remote attackers to cause a denial of service (uninitialized memory read and application crash) via a crafted packet. Scope: local bookworm: resolv

CVE-2012-6062 [MEDIUM] CVE-2012-6062: wireshark - The dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the RTCP disse... The dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.8.6-1) bullseye: resolved (fixed in 1.8.6-1) forky: resolved (fixed in 1.8.6-1) sid: resol

CVE-2014-5165 [MEDIUM] CVE-2014-5165: wireshark - The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c i... The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.0+git+4fab41a1

CVE-2012-6060 [MEDIUM] CVE-2012-6060: wireshark - Integer overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-isc... Integer overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-iscsi.c in the iSCSI dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.8.6-1) bullseye: resolved (fixed in 1.8.6-1) forky: resolved (fix

CVE-2012-6061 [MEDIUM] CVE-2012-6061: wireshark - The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP disse... The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data type for a certain length field, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a crafted value in a packet. Scope: local bookworm: resolved (fixed i

CVE-2015-0562 [MEDIUM] CVE-2015-0562: wireshark - Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in... Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory. Scope: local bookwo

CVE-2015-2192 [MEDIUM] CVE-2015-2192: wireshark - Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissector... Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-4) bullseye: resolved (fixed in 1.12.1+

CVE-2015-6247 [MEDIUM] CVE-2015-6247: wireshark - The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.... The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 does not validate a certain offset value, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.7+g7fc8978-1) bullseye: resolved (fixe

CVE-2013-6339 [MEDIUM] CVE-2013-6339: wireshark - The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the O... The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (loop) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.3-1) bullseye: resolved (fixed in 1.10.3-1) forky: resolved (fixed in 1.10.3-1) s

CVE-2022-3190 [MEDIUM] CVE-2022-3190: wireshark - Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 t... Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file Scope: local bookworm: resolved (fixed in 3.6.8-1) bullseye: resolved (fixed in 3.4.16-0+deb11u1) forky: resolved (fixed in 3.6.8-1) sid: resolved (fixed in 3.6.8-1) trixie: resolved (fixe

CVE-2015-8713 [MEDIUM] CVE-2015-8713: wireshark - epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x be... epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.1+g59ea380-1) bullseye: resolved (fix

CVE-2016-4420 [MEDIUM] CVE-2016-4420: wireshark - The NFS dissector in Wireshark 2.x before 2.0.2 allows remote attackers to cause... The NFS dissector in Wireshark 2.x before 2.0.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.2+ga16e22e-1) bullseye: resolved (fixed in 2.0.2+ga16e22e-1) forky: resolved (fixed in 2.0.2+ga16e22e-1) sid: resolved (fixed in 2.0.2+ga16e22e-1) trixie: resolved (fixed in 2.0