Export limit exceeded: 425852 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2019-5717

wireshark: P_MUL dissector crash in epan/dissectors/packet-p_mul.c

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2019-5716

wireshark: reachable assertion in fast_ensure_contiguous() from 6LoWPAN dissector

In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2019-19553

wireshark: CMS dissector crash (wnpa-sec-2019-22)

In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.

CVSS 3.1 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Debian Opensuse Oracle and 1 more
Products
Debian Linux Leap Solaris and 2 more
CVE-2019-16319

wireshark: gryphon dissector infinite loop (wnpa-sec-2019-21)

In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Debian Opensuse Wireshark
Products
Debian Linux Leap Wireshark
CVE-2019-13619

wireshark: ASN.1 BER dissector crash (wnpa-sec-2019-20)

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.

CVSS 3.1 · 7.5 High EPSS 6.1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-12295

wireshark: missing dissection recursion checks leads to denial of service

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Canonical Debian F5 and 1 more
Products
Ubuntu Linux Debian Linux Big-ip Access Policy Manager and 13 more
CVE-2019-10903

wireshark: DCERPC SPOOLSS dissector crash (wnpa-sec-2019-18)

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.

CVSS 3.1 · 7.5 High EPSS 5.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-10902

wireshark: TSDNS dissector crash (wnpa-sec-2019-16)

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.

CVSS 3.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Fedoraproject Wireshark
Products
Fedora Wireshark
CVE-2019-10901

wireshark: LDSS dissector crash (wnpa-sec-2019-17)

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.

CVSS 3.1 · 7.5 High EPSS 5.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-10900

wireshark: Rbm dissector infinite loop (wnpa-sec-2019-13)

In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely.

CVSS 3.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Fedoraproject Wireshark
Products
Fedora Wireshark
CVE-2019-10899

wireshark: SRVLOC dissector crash (wnpa-sec-2019-10)

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.

CVSS 3.1 · 7.5 High EPSS 5.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-10898

wireshark: GSUP dissector infinite loop (wnpa-sec-2019-18)

In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length.

CVSS 3.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Fedoraproject Wireshark
Products
Fedora Wireshark
CVE-2019-10897

wireshark: IEEE 802.11 dissector infinite loop (wnpa-sec-2019-11 )

In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.

CVSS 3.0 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Fedoraproject Wireshark
Products
Fedora Wireshark
CVE-2019-10896

wireshark: DOF dissector crash (wnpa-sec-2019-15)

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

CVSS 3.1 · 7.5 High EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-10895

wireshark: NetScaler file parser crash (wnpa-sec-2019-09)

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.

CVSS 3.1 · 7.5 High EPSS 5.8% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-10894

wireshark: GSS-API dissector crash (wnpa-sec-2019-14)

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called.

CVSS 3.1 · 7.5 High EPSS 5.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2018-9274

wireshark: memory leak in ui/failure_message.c

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_message.c has a memory leak.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2018-9273

wireshark: memory leak in epan/dissectors/packet-pcp.c

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-9272

wireshark: memory leak in epan/dissectors/packet-h223.c

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2018-9271

wireshark: memory leak in epan/dissectors/packet-multipart.c

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory leak.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Wireshark
Products
Wireshark