ALT-PU-2013-1068-1
Closed vulnerabilities
Modified: 2024-11-21
CVE-2013-6336
The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ieee802154.c?r1=52036&r2=52035&pathrev=52036
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ieee802154.c?r1=52036&r2=52035&pathrev=52036
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52036
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52036
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- DSA-2792
- DSA-2792
- http://www.wireshark.org/security/wnpa-sec-2013-61.html
- http://www.wireshark.org/security/wnpa-sec-2013-61.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9139
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9139
- oval:org.mitre.oval:def:19193
- oval:org.mitre.oval:def:19193
Modified: 2024-11-21
CVE-2013-6337
Unspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- DSA-2792
- DSA-2792
- http://www.wireshark.org/security/wnpa-sec-2013-62.html
- http://www.wireshark.org/security/wnpa-sec-2013-62.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9168
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9168
- oval:org.mitre.oval:def:19329
- oval:org.mitre.oval:def:19329
Modified: 2024-11-21
CVE-2013-6338
The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=52354&r2=52353&pathrev=52354
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=52354&r2=52353&pathrev=52354
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52354
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52354
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- DSA-2792
- DSA-2792
- http://www.wireshark.org/security/wnpa-sec-2013-63.html
- http://www.wireshark.org/security/wnpa-sec-2013-63.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9228
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9228
- oval:org.mitre.oval:def:19145
- oval:org.mitre.oval:def:19145
Modified: 2024-11-21
CVE-2013-6339
The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (loop) via a crafted packet.
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52458&r2=52457&pathrev=52458
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52458&r2=52457&pathrev=52458
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52463&r2=52462&pathrev=52463
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52463&r2=52462&pathrev=52463
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52458
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52458
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52463
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52463
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- http://www.wireshark.org/security/wnpa-sec-2013-64.html
- http://www.wireshark.org/security/wnpa-sec-2013-64.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9248
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9248
- oval:org.mitre.oval:def:19086
- oval:org.mitre.oval:def:19086
Modified: 2024-11-21
CVE-2013-6340
epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly determine the amount of remaining data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-tcp.c?r1=52570&r2=52569&pathrev=52570
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-tcp.c?r1=52570&r2=52569&pathrev=52570
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52570
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52570
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- DSA-2792
- DSA-2792
- http://www.wireshark.org/security/wnpa-sec-2013-65.html
- http://www.wireshark.org/security/wnpa-sec-2013-65.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9263
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9263
- oval:org.mitre.oval:def:19298
- oval:org.mitre.oval:def:19298