Debian Wireshark vulnerabilities

CVE-2024-4853 [LOW] CVE-2024-4853: wireshark - Memory handling issue in editcap could cause denial of service via crafted captu... Memory handling issue in editcap could cause denial of service via crafted capture file Scope: local bookworm: resolved (fixed in 4.0.17-0+deb12u1) bullseye: resolved (fixed in 3.4.16-0+deb11u1) forky: resolved (fixed in 4.2.5-1) sid: resolved (fixed in 4.2.5-1) trixie: resolved (fixed in 4.2.5-1)

CVE-2008-4683 [MEDIUM] CVE-2008-4683: wireshark - The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector ... The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvb_memcpy call. Scope: local bookworm: resolved (fixed in 1.0.4-1) bullseye: resolved (fixed in 1.0.4-1) for

CVE-2008-4685 [MEDIUM] CVE-2008-4685: wireshark - Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q93... Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception. Scope: local bookworm: resolved (fixed in 1.0.4-1) bullseye: resolved (fixed in 1.0.4-1) forky:

CVE-2006-4330 [MEDIUM] CVE-2006-4330: wireshark - Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal)... Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors. Scope: local bookworm: resolved (fixed in 0.99.2-5) bullseye: resolved (fixed in 0.99.2-5) forky: resolved (fixed in 0.99.2-5) sid: resolved (fixed in 0.99.2-5) trixie: resolved (fixed in 0.99

CVE-2011-1139 [MEDIUM] CVE-2011-1139: wireshark - wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allow... wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) via a pcap-ng file that contains a large packet-length field. Scope: local bookworm: resolved (fixed in 1.4.4-1) bullseye: resolved (fixed in 1.4.4-1) forky: resolved (fixed in 1.4.4-1) sid: resolved (fixed in 1.4.4-1)

CVE-2025-13945 [MEDIUM] CVE-2025-13945: wireshark - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service Scope: local bookworm: open bullseye: resolved (fixed in 3.4.16-0+deb11u2) forky: resolved (fixed in 4.6.2-1) sid: resolved (fixed in 4.6.2-1) trixie: resolved (fixed in 4.4.13-0+deb13u1)

CVE-2012-0066 [MEDIUM] CVE-2012-0066: wireshark - Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to ... Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a (1) Accellent 5Views (aka .5vw) file, (2) I4B trace file, or (3) NETMON 2 capture file. Scope: local bookworm: resolved (fixed in 1.6.5-1) bullseye: resolved (fixed in 1.6.5-1) forky: resolved (fixed in 1.6.5-1) sid:

CVE-2025-13674 [MEDIUM] CVE-2025-13674: wireshark - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service BPv7 dissector crash in Wireshark 4.6.0 allows denial of service Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 4.6.1-1) sid: resolved (fixed in 4.6.1-1) trixie: resolved

CVE-2007-6439 [MEDIUM] CVE-2007-6439: wireshark - Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial o... Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by CVE-2007-6116. The DCP ETSI issue is already covered by CVE-2007-6119.

CVE-2011-1958 [MEDIUM] CVE-2011-1958: wireshark - Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote... Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file. Scope: local bookworm: resolved (fixed in 1.6.0-1) bullseye: resolved (fixed in 1.6.0-1) forky: resolved (fixed in 1.6.0-1) sid: resolved (fixed in 1.6.0-1)

CVE-2011-2597 [MEDIUM] CVE-2011-2597: wireshark - The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.... The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets. Scope: local bookworm: resolved (fixed in 1.6.1-1) bullseye: resolved (fixed in 1.6.1-1) forky: resolved (fixed in 1.6.1-1) sid: resolved (fixed in 1.6.1-1) trixie: resolved (fixe

CVE-2011-4100 [MEDIUM] CVE-2011-4100: wireshark - The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 di... The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.6.3-1) bullseye: resolved (fixed in 1.6.3-1) forky: resolve

CVE-2012-0041 [MEDIUM] CVE-2012-0041: wireshark - The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 an... The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file. Scope: local bookworm: resolved (fixed in 1.6.5-1) bullseye: resolved (fixed in 1.6.5-1) forky: resolved (fixed in 1.6

CVE-2011-1590 [MEDIUM] CVE-2011-1590: wireshark - The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 do... The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file. Scope: local bookworm: resolved (fixed in 1.4.5-1) bullseye: resolved (fixed in 1.4.5-1) forky: resolved (fixed in 1.4.5-1) sid:

CVE-2012-1595 [MEDIUM] CVE-2012-1595: wireshark - The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.... The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a WTAP_ENCAP_ERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size, related to the pcap and pcap-ng file parsers. Scope: local book

CVE-2008-1071 [MEDIUM] CVE-2008-1071: wireshark - The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows... The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet. Scope: local bookworm: resolved (fixed in 0.99.8-1) bullseye: resolved (fixed in 0.99.8-1) forky: resolved (fixed in 0.99.8-1) sid: resolved (fixed in 0.99.8-1) trixie: resolved (fixed in 0.99.8-1)

CVE-2011-3482 [MEDIUM] CVE-2011-3482: wireshark - The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 di... The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Scope: local bookworm: resolved (fixed in 1.6.2-1) bullseye: resolved (fixed in 1.6.2-1) forky:

CVE-2014-4020 [MEDIUM] CVE-2014-4020: wireshark - The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadi... The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negative integer as a length value even though it was intended to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Scope: local bookworm: resolved (f

CVE-2009-0599 [MEDIUM] CVE-2009-0599: wireshark - Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows ... Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file. Scope: local bookworm: resolved (fixed in 1.0.6-1) bullseye: resolved (fixed in 1.0.6-1) forky: resolved (fixed in 1.0.6-1) sid: resolved (fixed in 1.0.6-1) trixie: res

CVE-2015-8737 [MEDIUM] CVE-2015-8737: wireshark - The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.... The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 2.0.1+g59ea380-1) bullseye: resolved (fixed in 2.0.1+g59ea380-1) forky: