Huáscar

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5 **Description** The issue is related to a crash in the BLF file parser, allowing denial of service via a crafted capture file. **Recommendations** For Wireshark versions 3.6.0 through 3.6.13, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.5, update to a version outside of this range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5 **Description** The issue allows for denial of service via a crafted capture file, causing a crash in the candump log parser. **Recommendations** For Wireshark versions 3.6.0 through 3.6.13, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.5, update to a version outside of this range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5 **Description** The issue is related to a crash in the BLF file parser, which can be exploited to cause a denial of service via a crafted capture file. **Recommendations** For Wireshark versions 3.6.0 through 3.6.13, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.5, update to a version outside of this range to resolve the issue. As a temporary workaround, consider avoiding the use of crafted capture files until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5 **Description** The issue allows for denial of service via a crafted capture file, affecting the VMS TCPIPtrace file parser in Wireshark. **Recommendations** For Wireshark versions 3.6.0 through 3.6.13, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.5, update to a version outside of this range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5 **Description** The issue allows for a denial of service via a crafted capture file, affecting the NetScaler file parser in Wireshark. **Recommendations** For Wireshark versions 3.6.0 through 3.6.13, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.5, update to a version outside of this range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SmartDNS versions through 41 before 56d0332 **Description** The issue is caused by a stack-based buffer overflow in the ` dns encode domain` function in the dns.c file, allowing an out-of-bounds write via a crafted DNS request. This can be exploited by sending a specifically crafted DNS request to the affected system. **Recommendations** For SmartDNS versions through 41 before 56d0332, update to a version that includes the fix for the buffer overflow in the ` dns encode domain` function. As a temporary workaround, consider restricting access to the ` dns encode domain` function in the dns.c file until a patch is available.