Debian Wireshark vulnerabilities

CVE-2013-4076 [MEDIUM] CVE-2013-4076: wireshark - Buffer overflow in the dissect_iphc_crtp_fh function in epan/dissectors/packet-p... Buffer overflow in the dissect_iphc_crtp_fh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.0-1) bullseye: resolved (fixed in 1.10.0-1) forky: resolved (fixed in 1.10.0-1) sid: r

CVE-2013-3559 [MEDIUM] CVE-2013-3559: wireshark - epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x b... epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.8.7-1) bullsey

CVE-2013-3557 [MEDIUM] CVE-2013-3557: wireshark - The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER... The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 does not properly initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.8.7-1) bullseye: resolv

CVE-2013-4075 [MEDIUM] CVE-2013-4075: wireshark - epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.... epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.0-1) bullseye: resolved (fixed in 1.10.0-1) forky: resolved (fixed in 1.10.0-1) sid: r

CVE-2013-4079 [MEDIUM] CVE-2013-4079: wireshark - The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in th... The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (infinite loop and application hang) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.0-1) bullseye: resolved (fixed in 1.10.0-1) forky: resolved (fixed in 1.10

CVE-2013-5720 [MEDIUM] CVE-2013-5720: wireshark - Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.... Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.2-1) bullseye: resolved (fixed in 1.10.2-1) forky: resolved (fixed in 1.10.2-1) sid: resolved (fixed in 1.10.2-1) trixie: resolv

CVE-2013-4926 [MEDIUM] CVE-2013-4926: wireshark - epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in W... epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly determine whether there is remaining packet data to process, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.1-1) bullseye: resolved (fixe

CVE-2014-6425 [MEDIUM] CVE-2014-6425: wireshark - The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissecto... The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector in Wireshark 1.12.x before 1.12.1 allow remote attackers to cause a denial of service (buffer over-read and application crash) via a CUPS packet that lacks a trailing '\0' character. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-1) bul

CVE-2012-6053 [MEDIUM] CVE-2012-6053: wireshark - epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x before 1.6.... epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 relies on a length field to calculate an offset value, which allows remote attackers to cause a denial of service (infinite loop) via a zero value for this field. Scope: local bookworm: resolved (fixed in 1.8.6-1) bullseye: resolved (fixed in 1.8.6-1) forky: r

CVE-2012-6057 [MEDIUM] CVE-2012-6057: wireshark - The dissect_eigrp_metric_comm function in epan/dissectors/packet-eigrp.c in the ... The dissect_eigrp_metric_comm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.8.6-1) bullseye: reso

CVE-2015-8715 [MEDIUM] CVE-2015-8715: wireshark - epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x be... epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does not check for empty arguments, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.1+g59ea380-1) bullseye: resolved (fixed in 2.0.1+g59ea380-1) forky: resolved (fixed in 2.0.1+g5

CVE-2019-9209 [MEDIUM] CVE-2019-9209: wireshark - In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related disse... In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values. Scope: local bookworm: resolved (fixed in 2.6.7-1) bullseye: resolved (fixed in 2.6.7-1) forky: resolved (fixed in 2.6.7-1) sid: resolv

CVE-2015-3815 [MEDIUM] CVE-2015-3815: wireshark - The detect_version function in wiretap/logcat.c in the Android Logcat file parse... The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than C

CVE-2015-0563 [MEDIUM] CVE-2015-0563: wireshark - epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1... epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf-3) bullseye: resolved (fix

CVE-2015-3906 [MEDIUM] CVE-2015-3906: wireshark - The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file par... The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly handle a lack of \0 termination, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted message in a packet, a different vulnerability than CVE-2015-3815. Scope: local b

CVE-2015-0560 [MEDIUM] CVE-2015-0560: wireshark - The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c... The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.1+g01b65bf

CVE-2015-6245 [MEDIUM] CVE-2015-6245: wireshark - epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.... epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.7+g7fc8978-1) bullseye: resolved (fixed in 1.12.7+g7fc8978-1) forky: resolved (fixed in

CVE-2013-5719 [MEDIUM] CVE-2013-5719: wireshark - epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x bef... epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.2-1) bullseye: resolved (fixed in 1.10.2-1) forky: resolved (fixed in 1.10.2-1) sid: resolved (fixed in 1.10.2-1

CVE-2013-2486 [MEDIUM] CVE-2013-2486: wireshark - The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the... The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet. Scope: local bookworm: resolved (fixed in 1.8.

CVE-2013-4078 [MEDIUM] CVE-2013-4078: wireshark - epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.... epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.0-1) bullseye: resolved (fixed in 1.10.0-1) forky: resolved (fixed