Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2021-39923

wireshark: PNRP dissector large loop

Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2021-39920

wireshark: IPPUSB dissector crash

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Fedoraproject Wireshark
Products
Fedora Wireshark
CVE-2021-22235

wireshark: DNP dissector crash

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2020-9431

wireshark: LTE RRC dissector memory leak could result in excessive memory resource consumption

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations.

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 1 more
Products
Debian Linux Fedora Leap and 1 more
CVE-2020-9430

wireshark: injecting a malformed packet may cause WiMax DLMAP dissector to crash due to out-of-bound read

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.

CVSS 3.1 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 1 more
Products
Debian Linux Fedora Leap and 1 more
CVE-2020-9429

wireshark: WireGuard dissector could crash due to NULL pointer dereference

In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Opensuse Wireshark
Products
Leap Wireshark
CVE-2020-9428

wireshark: injecting a malformed packet may cause the EAP dissector to crash due to out-of-bounds read

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 1 more
Products
Debian Linux Fedora Leap and 1 more
CVE-2020-7045

wireshark: invalid memory access in BT ATT dissector

In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2020-7044

wireshark: WASSP dissector crash (wnpa-sec-2020-01)

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Fedoraproject Opensuse Oracle and 1 more
Products
Fedora Leap Solaris and 2 more