Debian Wireshark vulnerabilities

CVE-2024-4855 [LOW] CVE-2024-4855: wireshark - Use after free issue in editcap could cause denial of service via crafted captur... Use after free issue in editcap could cause denial of service via crafted capture file Scope: local bookworm: resolved (fixed in 4.0.17-0+deb12u1) bullseye: open forky: resolved (fixed in 4.2.5-1) sid: resolved (fixed in 4.2.5-1) trixie: resolved (fixed in 4.2.5-1)

CVE-2006-5468 [MEDIUM] CVE-2006-5468: wireshark - Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal)... Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors. Scope: local bookworm: resolved (fixed in 0.99.4-1) bullseye: resolved (fixed in 0.99.4-1) forky: resolved (fixed in 0.99.4-1) sid: resolved (fixed in 0.99.4-1) trixie: resolved (fixed in 0.99

CVE-2015-8720 [MEDIUM] CVE-2015-8720: wireshark - The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the ... The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.1+g59ea380-1) bullseye: re

CVE-2015-8712 [MEDIUM] CVE-2015-8712: wireshark - The dissect_hsdsch_channel_info function in epan/dissectors/packet-umts_fp.c in ... The dissect_hsdsch_channel_info function in epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.1+g59ea380-1) bullseye: resolved (fixed in 2.

CVE-2015-8716 [MEDIUM] CVE-2015-8716: wireshark - The init_t38_info_conv function in epan/dissectors/packet-t38.c in the T.38 diss... The init_t38_info_conv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.1+g59ea380-1) bullseye: resolved (fixed in 2.0.1+g59ea3

CVE-2015-8714 [MEDIUM] CVE-2015-8714: wireshark - The dissect_dcom_OBJREF function in epan/dissectors/packet-dcom.c in the DCOM di... The dissect_dcom_OBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.1+g59ea380-1) bullseye: resolved (fixed in 2.0

CVE-2015-8717 [MEDIUM] CVE-2015-8717: wireshark - The dissect_sdp function in epan/dissectors/packet-sdp.c in the SDP dissector in... The dissect_sdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.1+g59ea380-1) bullseye: resolved (fixed in 2.0.1+g59ea380-1

CVE-2018-19624 [MEDIUM] CVE-2018-19624: wireshark - In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash.... In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference. Scope: local bookworm: resolved (fixed in 2.6.5-1) bullseye: resolved (fixed in 2.6.5-1) forky: resolved (fixed in 2.6.5-1) sid: resolved (fixed in 2.6.5-1) trixie: resolved (fixed in 2.6.

CVE-2019-5716 [MEDIUM] CVE-2019-5716: wireshark - In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was address... In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation. Scope: local bookworm: resolved (fixed in 2.6.6-1) bullseye: resolved (fixed in 2.6.6-1) forky: resolved (fixed in 2.6.6-1) sid: resolved (fixed in 2.6.6-1) trixie: resolved (fixed in 2.6.6-1)

CVE-2019-5718 [MEDIUM] CVE-2019-5718: wireshark - In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other AS... In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check. Scope: local bookworm: resolved (fixed in 2.6.6-1) bullseye: resolved (fixed in 2.6.6-1) forky: resolved (fixed in 2.6.6-1) sid: resolved (fixed in 2.6.6-1) trixie: resolved (fixe

CVE-2018-19625 [MEDIUM] CVE-2018-19625: wireshark - In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could cra... In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read. Scope: local bookworm: resolved (fixed in 2.6.5-1) bullseye: resolved (fixed in 2.6.5-1) forky: resolved (fixed in 2.6.5-1) sid: resolved (fixed in 2.6.5-1) trixie: resolved (fixed in 2.6.5

CVE-2015-8734 [MEDIUM] CVE-2015-8734: wireshark - The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in... The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 2.0.1+g59ea380-1) bullseye: resolved (fixed in 2.0.1+g59ea380-1) forky: resolved (fix

CVE-2010-2992 [MEDIUM] CVE-2010-2992: wireshark - packet-gsm_a_rr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 all... packet-gsm_a_rr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference. Scope: local bookworm: resolved (fixed in 1.2.10-1) bullseye: resolved (fixed in 1.2.10-1) forky: resolved (fixed in 1.2.10-1) sid: resolved (fixed in 1.2.10-1) trixie

CVE-2013-4920 [MEDIUM] CVE-2013-4920: wireshark - The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize ... The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.1-1) bullseye: resolved (fixed in 1.10.1-1) forky: resolved (fixed in 1.10.1-1) sid: resolved (fixed in 1.10.1-1) trixi

CVE-2013-3560 [MEDIUM] CVE-2013-3560: wireshark - The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in... The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.8.7-1) bullseye: resolved (fixed in 1.8.7-1) fo

CVE-2006-3631 [MEDIUM] CVE-2006-3631: wireshark - Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.1... Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. Scope: local bookworm: resolved (fixed in 0.99.2-1) bullseye: resolved (fixed in 0.99.2-1) forky: resolved (fixed in 0.99.2-1) sid: resolved (fixed in 0.99.2-1) trixie: resolved

CVE-2010-2993 [MEDIUM] CVE-2010-2993: wireshark - The IPMI dissector in Wireshark 1.2.0 through 1.2.9 allows remote attackers to c... The IPMI dissector in Wireshark 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors. Scope: local bookworm: resolved (fixed in 1.2.10-1) bullseye: resolved (fixed in 1.2.10-1) forky: resolved (fixed in 1.2.10-1) sid: resolved (fixed in 1.2.10-1) trixie: resolved (fixed in 1.2.10-1)

CVE-2006-5469 [MEDIUM] CVE-2006-5469: wireshark - Unspecified vulnerability in the WBXML dissector in Wireshark (formerly Ethereal... Unspecified vulnerability in the WBXML dissector in Wireshark (formerly Ethereal) 0.10.11 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger a null dereference. Scope: local bookworm: resolved (fixed in 0.99.4-1) bullseye: resolved (fixed in 0.99.4-1) forky: resolved (fixed in 0.99.4-1) sid: resolved (fixed

CVE-2006-5740 [MEDIUM] CVE-2006-5740: wireshark - Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal)... Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via a crafted LDAP packet. Scope: local bookworm: resolved (fixed in 0.99.4-1) bullseye: resolved (fixed in 0.99.4-1) forky: resolved (fixed in 0.99.4-1) sid: resolved (fixed in 0.99.4-1) trixie: resolved (fixed in 0.

CVE-2013-7113 [MEDIUM] CVE-2013-7113: wireshark - epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before... epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (fixed in 1.10.4-1) bullseye: resolved (fixed in 1.10.4-1) forky: resolved (fixed in 1.10.4-1) sid: reso