Browse CVEs

MEDIUM 5.5 CVE-2025-13674 BPv7 dissector crash in Wireshark 4.6.0 allows denial of service Wireshark Mitigation only Fix from $1,6002025-11-26 MEDIUM 5.5 CVE-2024-9780 ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file Wireshark No fix yet Fix from $1,6002024-10-10 HIGH 7.5 CVE-2024-0210 Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Wireshark No fix yet Fix from $1,9502024-01-03 HIGH 7.5 CVE-2024-0211 DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Wireshark No fix yet Fix from $1,9502024-01-03 HIGH 7.5 CVE-2024-0207 HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Wireshark No fix yet Fix from $1,9502024-01-03 HIGH 7.5 CVE-2018-11354 In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to… Wireshark Mitigation only Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11355 In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet stat… Wireshark Mitigation only Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11361 In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow dur… Wireshark Mitigation only Fix from $1,9502018-05-22 HIGH 7.5 CVE-2017-17083 In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensurin… Wireshark Mitigation only Fix from $1,9502017-12-01 HIGH 7.5 CVE-2017-17084 In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by val… Wireshark Mitigation only Fix from $1,9502017-12-01 HIGH 7.5 CVE-2017-17085EPSS 17% In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by va… Wireshark No fix yet Fix from $1,9502017-12-01 MEDIUM 5.5 CVE-2017-9616 In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/fil… Wireshark Mitigation only Fix from $1,6002017-06-14 MEDIUM 5.9 CVE-2016-9376 In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture … Wireshark Mitigation only Fix from $1,6002016-11-17 MEDIUM 5.9 CVE-2016-9375 In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. Thi… Wireshark Mitigation only Fix from $1,6002016-11-17 MEDIUM 5.9 CVE-2016-9374 In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture … Wireshark Mitigation only Fix from $1,6002016-11-17 MEDIUM 5.9 CVE-2016-9373 In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture fil… Wireshark Mitigation only Fix from $1,6002016-11-17 MEDIUM 5.9 CVE-2016-9372 In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in… Wireshark No fix yet Fix from $1,6002016-11-17 MEDIUM 5.9 CVE-2016-6513 epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attack… Wireshark Mitigation only Fix from $1,6002016-08-06 MEDIUM 5.9 CVE-2016-6512EPSS 8% epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to… Wireshark No fix yet Fix from $1,6002016-08-06 MEDIUM 5.9 CVE-2016-6511 epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large l… Wireshark Mitigation only Fix from $1,6002016-08-06 MEDIUM 5.9 CVE-2016-6510 Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers… Wireshark Mitigation only Fix from $1,6002016-08-06 MEDIUM 5.9 CVE-2016-6508 epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which … Wireshark Mitigation only Fix from $1,6002016-08-06 MEDIUM 5.9 CVE-2016-6507 epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (infinite… Wireshark Mitigation only Fix from $1,6002016-08-06 MEDIUM 5.9 CVE-2016-6505EPSS 8% epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause … Wireshark No fix yet Fix from $1,6002016-08-06 MEDIUM 5.9 CVE-2016-6504EPSS 7% epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, which al… Wireshark No fix yet Fix from $1,6002016-08-06 MEDIUM 5.9 CVE-2016-6503EPSS 6% The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which a… Wireshark No fix yet Fix from $1,6002016-08-06 MEDIUM 5.9 CVE-2016-4421 epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a de… Wireshark Mitigation only Fix from $1,6002016-05-01 MEDIUM 5.9 CVE-2016-4420 The NFS dissector in Wireshark 2.x before 2.0.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Wireshark Mitigation only Fix from $1,6002016-05-01 MEDIUM 5.9 CVE-2016-4419 epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to caus… Wireshark Mitigation only Fix from $1,6002016-05-01 MEDIUM 5.9 CVE-2016-4418 epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a de… Wireshark Mitigation only Fix from $1,6002016-05-01