| Max CVSS | 7.8 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-4081 | 5.0 |
The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause
|
30-10-2018 - 16:27 | 09-06-2013 - 21:55 | |
| CVE-2013-3556 | 5.0 |
The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service (application crash) v
|
30-10-2018 - 16:27 | 25-05-2013 - 03:18 | |
| CVE-2013-3561 | 7.8 |
Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector,
|
30-10-2018 - 16:27 | 25-05-2013 - 03:18 | |
| CVE-2013-4075 | 5.0 |
epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
|
30-10-2018 - 16:27 | 09-06-2013 - 21:55 | |
| CVE-2013-3558 | 5.0 |
The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service (application crash) via a ma
|
30-10-2018 - 16:27 | 25-05-2013 - 03:18 | |
| CVE-2013-4076 | 5.0 |
Buffer overflow in the dissect_iphc_crtp_fh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
|
30-10-2018 - 16:27 | 09-06-2013 - 21:55 | |
| CVE-2013-3555 | 5.0 |
epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related to ciphers, which allows remote attackers to cause a denial of service (application crash) via a malformed pac
|
30-10-2018 - 16:27 | 25-05-2013 - 03:18 | |
| CVE-2013-3559 | 5.0 |
epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer de
|
30-10-2018 - 16:27 | 25-05-2013 - 03:18 | |
| CVE-2013-4082 | 5.0 |
The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between a record length and a trailer length, which allows remote attackers to cause a denial of service (hea
|
30-10-2018 - 16:27 | 09-06-2013 - 21:55 | |
| CVE-2013-4079 | 5.0 |
The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (infinite loop and application hang) via a crafted packet.
|
30-10-2018 - 16:27 | 09-06-2013 - 21:55 | |
| CVE-2013-3562 | 5.0 |
Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (application crash) via a malformed p
|
30-10-2018 - 16:27 | 25-05-2013 - 03:18 | |
| CVE-2013-3560 | 5.0 |
The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash)
|
30-10-2018 - 16:27 | 25-05-2013 - 03:18 | |
| CVE-2013-4078 | 5.0 |
epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service (application crash) via a crafted packet
|
30-10-2018 - 16:27 | 09-06-2013 - 21:55 | |
| CVE-2013-4074 | 5.0 |
The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cau
|
30-10-2018 - 16:27 | 09-06-2013 - 21:55 | |
| CVE-2013-4077 | 5.0 |
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
|
30-10-2018 - 16:27 | 09-06-2013 - 21:55 | |
| CVE-2013-3557 | 5.0 |
The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 does not properly initialize a certain variable, which allows remote attackers to cause a denial of ser
|
30-10-2018 - 16:27 | 25-05-2013 - 03:18 | |
| CVE-2013-4080 | 5.0 |
The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.8 does not properly handle a zero-length item, which allows remote attackers to cause a denial of ser
|
19-09-2017 - 01:36 | 09-06-2013 - 21:55 | |
| CVE-2013-4083 | 5.0 |
The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denia
|
19-09-2017 - 01:36 | 09-06-2013 - 21:55 |