Debian Wireshark vulnerabilities

CVE-2012-6052 [MEDIUM] CVE-2012-6052: wireshark - Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostnam... Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostname information by reading pcap-ng files. Scope: local bookworm: resolved (fixed in 1.8.6-1) bullseye: resolved (fixed in 1.8.6-1) forky: resolved (fixed in 1.8.6-1) sid: resolved (fixed in 1.8.6-1) trixie: resolved (fixed in 1.8.6-1)

CVE-2012-1596 [MEDIUM] CVE-2012-1596: wireshark - The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in... The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a packet containing an invalid pointer value that triggers an incorrect memory-allocation attempt. Scope: local bookworm: resolved (f

CVE-2008-3145 [MEDIUM] CVE-2008-3145: wireshark - The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through ... The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read. Scope: local bookworm: resolved (fixed in 1.0.2-1) bullseye: resolved (fixed in 1.0.2-1) forky: resol

CVE-2008-1070 [MEDIUM] CVE-2008-1070: wireshark - The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows... The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet. Scope: local bookworm: resolved (fixed in 0.99.8-1) bullseye: resolved (fixed in 0.99.8-1) forky: resolved (fixed in 0.99.8-1) sid: resolved (fixed in 0.99.8-1) trixie: resolved (fixed in 0.99.8-1)

CVE-2007-6121 [MEDIUM] CVE-2007-6121: wireshark - Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause ... Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet. Scope: local bookworm: resolved (fixed in 0.99.7~pre1-1) bullseye: resolved (fixed in 0.99.7~pre1-1) forky: resolved (fixed in 0.99.7~pre1-1) sid: resolved (fixed in 0.99.7~pre1-1) trixie: resolved (fixed in 0.99.7~pre1-1)

CVE-2011-1141 [MEDIUM] CVE-2011-1141: wireshark - epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.... epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (memory consumption) via (1) a long LDAP filter string or (2) an LDAP filter string containing many elements. Scope: local bookworm: resolved (fixed in 1.4.4-1) bullseye: resolved (fixed in 1.4.4-1) forky: resolved (f

CVE-2024-11595 [HIGH] CVE-2024-11595: wireshark - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.... FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 4.4.2-1) sid: resolved (fixed in 4.4.2-1) trixie: resolved (fixed in 4.4.2-1)

CVE-2007-6438 [HIGH] CVE-2007-6438: wireshark - Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) ... Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111. Scope: local bookworm: resolved (fixed in 0.99.7-1) bullseye: resolved (fixed in 0.99.7-1) forky:

CVE-2025-13499 [HIGH] CVE-2025-13499: wireshark - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of se... Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service Scope: local bookworm: open bullseye: resolved (fixed in 3.4.16-0+deb11u2) forky: resolved (fixed in 4.6.1-1) sid: resolved (fixed in 4.6.1-1) trixie: resolved (fixed in 4.4.13-0+deb13u1)

CVE-2015-6249 [MEDIUM] CVE-2015-6249: wireshark - The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c... The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.12

CVE-2015-6241 [MEDIUM] CVE-2015-6241: wireshark - The proto_tree_add_bytes_item function in epan/proto.c in the protocol-tree impl... The proto_tree_add_bytes_item function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1

CVE-2013-4935 [MEDIUM] CVE-2013-4935: wireshark - The dissect_per_length_determinant function in epan/dissectors/packet-per.c in t... The dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize a length field in certain abnormal situations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed

CVE-2014-2283 [MEDIUM] CVE-2014-2283: wireshark - epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13... epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service (use-after-free error and application crash) via a crafted UMTS Radio Link Control packet. Scope: local bookworm: resolved (fixed in 1.10.6-1) bullseye:

CVE-2011-1957 [MEDIUM] CVE-2011-1957: wireshark - The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM disse... The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length. Scope: local bookworm: resolved (fixed in 1.6.0-1) bullseye: resolved (fixed in 1.6.0-1) forky: resolved (fixed in 1.6.0-1) sid:

CVE-2015-4652 [MEDIUM] CVE-2015-4652: wireshark - epan/dissectors/packet-gsm_a_dtap.c in the GSM DTAP dissector in Wireshark 1.12.... epan/dissectors/packet-gsm_a_dtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly validate digit characters, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the de_emerg_num_list and de_bcd_num functions. Scope: local bookworm: resolved (fixed in 1.12.6+gee1fce6-1) bull

CVE-2014-2907 [MEDIUM] CVE-2014-2907: wireshark - The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissect... The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.7-1) bullseye: resolved (fixed in 1.10.7-1) forky: r

CVE-2013-6340 [MEDIUM] CVE-2013-6340: wireshark - epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.... epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly determine the amount of remaining data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.3-1) bullseye: resolved (fixed in 1.10.3-1) forky: r

CVE-2006-4331 [MEDIUM] CVE-2006-4331: wireshark - Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (form... Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors. Scope: local bookworm: resolved (fixed in 0.99.2-5.1) bullseye: resolved (fixed in 0.99.2-5.1) forky: resolved (fixed in 0.99.2-5.1) sid: resolved (fixed in 0.99.2-5.1) trixie: re

CVE-2013-2485 [MEDIUM] CVE-2013-2485: wireshark - The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow... The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.8.6-1) bullseye: resolved (fixed in 1.8.6-1) forky: resolved (fixed in 1.8.6-1) sid: resolved (fixed in 1.8.6-1) trixie: resolved (fixed in 1.8.6-1)

CVE-2013-2482 [MEDIUM] CVE-2013-2482: wireshark - The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow... The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.8.6-1) bullseye: resolved (fixed in 1.8.6-1) forky: resolved (fixed in 1.8.6-1) sid: resolved (fixed in 1.8.6-1) trixie: resolved (fixed in 1.8.6-1)