Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 795

Export CSV
CVE-2018-5335

wireshark: WCP dissector crash

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/packet-wcp.c by validating the available buffer length.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-5334

wireshark: IxVeriWave file parser crash

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by correcting the signature timestamp bounds checks.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-19628

wireshark: ZigBee ZCL dissector crash

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error.

CVSS 3.0 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-19627

wireshark: IxVeriWave parser crash

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary.

CVSS 3.0 · 7.5 High EPSS 17.7% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-19626

wireshark: DCOM dissector crash resulting in information leak

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-19625

wireshark: Heap-based buffer over-read in the dissection engine

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-19624

wireshark: NULL pointer dereference resulting in a PVFS dissector crash

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-19623

wireshark: Heap buffer overflow in packet-lbmpdm.c:dissect_segment_ofstable() allows denial of service or possibly arbitrary code execution

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values.

CVSS 3.0 · 7.5 High EPSS 4.2% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-18227

wireshark: MS-WSP dissector crash

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-18226

wireshark: Steam IHS Discovery dissector memory leak

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-18225

wireshark: CoAP dissector crash

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.

CVSS 3.1 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Debian Opensuse Wireshark
Products
Debian Linux Leap Wireshark
CVE-2018-16058

wireshark: Bluetooth AVDTP dissector crash

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure.

CVSS 3.0 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-16057

wireshark: Radiotap dissector crash

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Debian Redhat Wireshark
Products
Debian Linux Enterprise Linux Wireshark
CVE-2018-16056

wireshark: Bluetooth Attribute Protocol dissector crash

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists.

CVSS 3.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-14438

wireshark: Improper Access Control in create_app_running_mutex function in wsutil/file_util.c

In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily.

CVSS 3.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2018-14370

wireshark: IEEE dissector infinite loop (wnpa-sec-2018-43)

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.

CVSS 3.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2018-14369

wireshark: HTTP2 dissector infinite loop (wnpa-sec-2018-41)

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression.

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Debian Wireshark
Products
Debian Linux Wireshark
CVE-2018-14368

wireshark: Bazaar dissector infinite loop (wnpa-sec-2018-40)

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

CVSS 3.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Debian Redhat Wireshark
Products
Debian Linux Enterprise Linux Wireshark
CVE-2018-14367

wireshark: CoAP dissector infinite loop (wnpa-sec-2018-42)

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Wireshark
Products
Wireshark