Debian Wireshark vulnerabilities

CVE-2006-3627 [MEDIUM] CVE-2006-3627: wireshark - Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal... Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors. Scope: local bookworm: resolved (fixed in 0.99.2-1) bullseye: resolved (fixed in 0.99.2-1) forky: resolved (fixed in 0.99.2-1) sid: resolved (fixed in 0.99.2-1) trixie: resolved (f

CVE-2013-4933 [MEDIUM] CVE-2013-4933: wireshark - The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wiresh... The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file. Scope: local bookworm: resolved (fixed in 1.10.1-1) bullseye: resolved (fixed in 1.10.1-1)

CVE-2013-4932 [MEDIUM] CVE-2013-4932: wireshark - Multiple array index errors in epan/dissectors/packet-gsm_a_common.c in the GSM ... Multiple array index errors in epan/dissectors/packet-gsm_a_common.c in the GSM A Common dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allow remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.1-1) bullseye: resolved (fixed in 1.10.1-1) forky: resolved (fixed in

CVE-2013-4921 [MEDIUM] CVE-2013-4921: wireshark - Off-by-one error in the dissect_radiotap function in epan/dissectors/packet-ieee... Off-by-one error in the dissect_radiotap function in epan/dissectors/packet-ieee80211-radiotap.c in the Radiotap dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.1-1) bullseye: resolved (fixed in 1.10.1-1) forky: resolved (fixed

CVE-2013-4936 [MEDIUM] CVE-2013-4936: wireshark - The IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real... The IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.1-1) bullseye: resolved (f

CVE-2009-2562 [MEDIUM] CVE-2009-2562: wireshark - Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 ... Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service (crash) via unknown vectors. Scope: local bookworm: resolved (fixed in 1.2.1-1) bullseye: resolved (fixed in 1.2.1-1) forky: resolved (fixed in 1.2.1-1) sid: resolved (fixed in 1.2.1-1) trixie: resolved (fixed in 1.2.1-1)

CVE-2012-6059 [MEDIUM] CVE-2012-6059: wireshark - The dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dis... The dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data structure to determine IKEv2 decryption parameters, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.8

CVE-2016-2527 [MEDIUM] CVE-2016-2527: wireshark - wiretap/nettrace_3gpp_32_423.c in the 3GPP TS 32.423 Trace file parser in Wiresh... wiretap/nettrace_3gpp_32_423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 2.0.2+ga16

CVE-2012-4287 [MEDIUM] CVE-2012-4287: wireshark - epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x befor... epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length. Scope: local bookworm: resolved (fixed in 1.8.2-1) bullseye: resolved (fixed in 1.8.2-1) forky: resolved (fixed in 1.8.2-1) sid: resolved (fixed in 1.8.

CVE-2017-9617 [MEDIUM] CVE-2017-9617: wireshark - In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontro... In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP dissector. Scope: local bookworm: resolved (fixed in 2.4.0-1) bullseye: resolved (fixed in 2.4.0-1) forky: resolved (fixed in 2.4.0-1) sid: resolved (fixed in 2.4.0-1) trixie: resolved (fi

CVE-2015-7830 [MEDIUM] CVE-2015-7830: wireshark - The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser... The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service (incorrect free and application crash) via a crafted packet that triggers interface-filter copying. Scope: local bookworm: resolved (fixed in 1.12.

CVE-2015-6244 [MEDIUM] CVE-2015-6244: wireshark - The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in th... The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.7+g7fc8978-1) bullseye:

CVE-2011-4102 [MEDIUM] CVE-2011-4102: wireshark - Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in t... Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (application crash) via a malformed file. Scope: local bookworm: resolved (fixed in 1.6.3-1) bullseye: resolved (fixed in 1.6.3-1) forky: resolved (fixed in 1

CVE-2024-8250 [HIGH] CVE-2024-8250: wireshark - NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows d... NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file Scope: local bookworm: resolved (fixed in 4.0.17-0+deb12u1) bullseye: resolved (fixed in 3.4.16-0+deb11u1) forky: resolved (fixed in 4.4.0-1) sid: resolved (fixed in 4.4.0-1) trixie: resolved (fixed in 4.4.0-1)

CVE-2011-1959 [MEDIUM] CVE-2011-1959: wireshark - The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and ... The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read. Scope: local bookworm: resolved (fixed in 1.6

CVE-2024-11596 [HIGH] CVE-2024-11596: wireshark - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denia... ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file Scope: local bookworm: open bullseye: resolved (fixed in 3.4.16-0+deb11u2) forky: resolved (fixed in 4.4.2-1) sid: resolved (fixed in 4.4.2-1) trixie: resolved (fixed in 4.4.2-1)

CVE-2024-9780 [HIGH] CVE-2024-9780: wireshark - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injec... ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 4.4.1-1) sid: resolved (fixed in 4.4.1-1) trixie: resolved (fixed in 4.4.1-1)

CVE-2015-6248 [MEDIUM] CVE-2015-6248: wireshark - The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wi... The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12.7+g7fc8978-1) bullseye: resolved (fixed in 1

CVE-2015-6243 [MEDIUM] CVE-2015-6243: wireshark - The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1... The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions. Scope: local bookworm: resolved

CVE-2014-2281 [MEDIUM] CVE-2014-2281: wireshark - The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS ... The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted NFS packet. Scope: local bookworm: resolved (fixed in 1.10.6-