Vulnerabilities > Wireshark

DATE CVE VULNERABILITY TITLE RISK
2008-03-31 CVE-2008-1561 Denial of Service vulnerability in Wireshark 0.99.8
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to cause a denial of service (application crash) via a malformed packet to the (1) X.509sat or (2) Roofnet dissectors.
network
low complexity
wireshark
5.0
2008-02-28 CVE-2008-1072 Denial of Service vulnerability in Wireshark 0.99.7
The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.
local
wireshark
4.7
2008-02-28 CVE-2008-1071 Resource Management Errors vulnerability in Wireshark
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
network
wireshark CWE-399
4.3
2008-02-28 CVE-2008-1070 Denial of Service vulnerability in Wireshark 0.99.7
The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
network
low complexity
wireshark
5.0
2007-12-19 CVE-2007-6451 Resource Management Errors vulnerability in Wireshark
Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory.
network
wireshark CWE-399
4.3
2007-12-19 CVE-2007-6450 Denial of Service vulnerability in Wireshark 0.99.6
The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
network
low complexity
wireshark
5.0
2007-12-19 CVE-2007-6441 Permissions, Privileges, and Access Controls vulnerability in Wireshark 0.99.6
The WiMAX dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors related to "unaligned access on some platforms."
low complexity
wireshark CWE-264
3.3
2007-11-23 CVE-2007-6121 Improper Input Validation vulnerability in multiple products
Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.
network
low complexity
ethereal-group wireshark CWE-20
5.0
2007-11-23 CVE-2007-6120 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
network
low complexity
wireshark ethereal-group CWE-119
5.0
2007-11-23 CVE-2007-6119 Remote vulnerability in Wireshark 0.99.6
The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
network
low complexity
wireshark
7.8