Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2020-28030

wireshark: malformed packet on wire could make GQUIC protocol dissector loop

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Debian Fedoraproject Wireshark
Products
Debian Linux Fedora Wireshark
CVE-2020-26575

wireshark: FBZERO dissector could enter an infinite loop

In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Debian Fedoraproject Oracle and 1 more
Products
Debian Linux Fedora Zfs Storage Appliance and 2 more
CVE-2020-25866

wireshark: BLIP dissector crash (wnpa-sec-2020-13)

In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Fedoraproject Opensuse Oracle and 1 more
Products
Fedora Leap Zfs Storage Appliance Kit and 1 more
CVE-2020-25863

wireshark: MIME multipart dissector crash (wnpa-sec-2020-11)

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts.

CVSS 3.1 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 2 more
Products
Debian Linux Fedora Leap and 3 more
CVE-2020-25862

wireshark: TCP dissector crash (wnpa-sec-2020-12)

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by changing the handling of the invalid 0xFFFF checksum.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 2 more
Products
Debian Linux Fedora Leap and 2 more
CVE-2020-17498

wireshark: Kafka protocol dissector could crash (wnpa-sec-2020-10)

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression.

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Fedoraproject Opensuse Oracle and 1 more
Products
Fedora Leap Zfs Storage Appliance Kit and 1 more
CVE-2020-15466

wireshark: GVCP dissector infinite loop

In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Debian Opensuse Wireshark
Products
Debian Linux Leap Wireshark
CVE-2020-13164

wireshark: NFS dissector crash (wnpa-sec-2020-08)

In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem.

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 1 more
Products
Debian Linux Fedora Leap and 1 more
CVE-2020-11647

wireshark: BACapp dissector crash (wnpa-sec-2020-07)

In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Debian Opensuse Wireshark
Products
Debian Linux Leap Wireshark
CVE-2019-9214

wireshark: null-deference read in RPCAP dissector

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation.

CVSS 3.0 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2019-9209

wireshark: Stack-based off-by-one buffer overflow in dissect_ber_GeneralizedTime

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Opensuse and 1 more
Products
Ubuntu Linux Debian Linux Leap and 1 more
CVE-2019-9208

wireshark: null-pointer dereference in TCAP dissector

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.

CVSS 3.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2019-5721

wireshark: use-after-free in ENIP dissector results in denial of service

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2019-5719

wireshark: ISAKMP dissector crash in epan/dissectors/packet-isakmp.c

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2019-5718

wireshark: out-of-bounds read in get_t61_string() in epan/charsets.c

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark