Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2021-4184

wireshark: BitTorrent DHT dissector infinite loop

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Debian Fedoraproject Oracle and 1 more
Products
Debian Linux Fedora Http Server and 2 more
CVE-2022-3725

wireshark: OPUS dissector crash

Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 6.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Fedoraproject Wireshark
Products
Fedora Wireshark
CVE-2022-3724

wireshark: denial of service via packet injection or crafted capture file

Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows

CVSS 3.1 · 6.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Microsoft Wireshark
Products
Windows Wireshark
CVE-2017-6470

wireshark: IAX2 infinite loop (wnpa-sec-2017-10)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6469

wireshark: LDSS dissector crash (wnpa-sec-2017-03)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by ensuring that memory is allocated for a certain data structure.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6471

wireshark: WSP infinite loop (wnpa-sec-2017-05)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6467

wireshark: Netscaler file parser infinite loop (wnpa-sec-2017-11)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6468

wireshark: NetScaler file parser crash (wnpa-sec-2017-08)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6472

wireshark: RTMPT dissector infinite loop (wnpa-sec-2017-04)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-5596

wireshark: ASTERIX infinite loop (wnpa-sec-2017-01)

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-5597

wireshark: DHCPv6 large loop (wnpa-sec-2017-02)

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-17935

Wireshark: denial of service in the File_read_line function in epan/wslua/wslua_file.c

The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-17997

wireshark: Misuse of NULL pointer in MRDISC dissector

In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6014

wireshark: Memory exhaustion/infinite loop via malformed STANAG 4607 capture file

In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-6473

wireshark: K12 file parser crash (wnpa-sec-2017-09)

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2017-15193

wireshark: MBIM dissector crash

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-15192

wireshark: BT ATT dissector crash

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2017-17083

wireshark: NetBIOS dissector crash

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark