Vulnerabilities > Wireshark > Wireshark > 1.10.1

DATE CVE VULNERABILITY TITLE RISK
2013-09-16 CVE-2013-5719 Resource Management Errors vulnerability in Wireshark
epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
network
wireshark CWE-399
4.3
2013-09-16 CVE-2013-5718 Permissions, Privileges, and Access Controls vulnerability in Wireshark
The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
network
wireshark CWE-264
4.3
2013-09-16 CVE-2013-5717 Improper Input Validation vulnerability in Wireshark 1.10.0/1.10.1
The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c.
network
wireshark CWE-20
4.3