Vulnerability index

Browse CVEs

593 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wireshark HIGH 7.5
CVE-2023-4511

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

Fix: after 4.0.7
Fix from $1,950 2023-08-24
Wireshark HIGH 7.5
CVE-2023-4512

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Fix: after 4.0.7
Fix from $1,950 2023-08-24
Wireshark HIGH 7.5
CVE-2023-4513

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

Fix: after 4.0.7
Fix from $1,950 2023-08-24
Wireshark MEDIUM 5.5
CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file

Fix: after 4.0.6
Fix from $1,600 2023-07-14
Wireshark MEDIUM 5.5
CVE-2023-3649

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Fix: after 4.0.6
Fix from $1,600 2023-07-14
Wireshark MEDIUM 6.5
CVE-2023-0666

Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to…

Fix: 4.0.6+
Fix from $1,600 2023-06-07
Wireshark MEDIUM 6.5
CVE-2023-0667

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration,…

Fix: 4.0.6+
Fix from $1,600 2023-06-07
Wireshark MEDIUM 6.5
CVE-2023-0668

Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is suscep…

Fix: 3.6.14 / 4.0.6+
Fix from $1,600 2023-06-07
Wireshark MEDIUM 6.5
CVE-2023-2952

XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

Fix: 3.6.14 / 4.0.6+
Fix from $1,600 2023-05-30
Wireshark HIGH 7.5
CVE-2023-2879

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

Fix: 3.6.14 / 4.0.6+
Fix from $1,950 2023-05-26
Wireshark MEDIUM 6.5
CVE-2023-2857

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Fix: 3.6.14 / 4.0.6+
Fix from $1,600 2023-05-26
Wireshark MEDIUM 6.5
CVE-2023-2858

NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Fix: 3.6.14 / 4.0.6+
Fix from $1,600 2023-05-26
Wireshark MEDIUM 6.5
CVE-2023-2854

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Fix: 3.6.14 / 4.0.6+
Fix from $1,600 2023-05-26
Wireshark MEDIUM 6.5
CVE-2023-2855

Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Fix: 3.6.14 / 4.0.6+
Fix from $1,600 2023-05-26
Wireshark MEDIUM 6.5
CVE-2023-2856

VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Fix: 3.6.14 / 4.0.6+
Fix from $1,600 2023-05-26
Wireshark MEDIUM 6.5
CVE-2023-1994

GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Fix: 3.6.13 / 4.0.5+
Fix from $1,600 2023-04-12
Wireshark MEDIUM 6.5
CVE-2023-1993

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Fix: 3.6.13 / 4.0.5+
Fix from $1,600 2023-04-12
Wireshark HIGH 7.5
CVE-2023-1992

RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Fix: 3.6.13 / 4.0.5+
Fix from $1,950 2023-04-12
Wireshark HIGH 7.1
CVE-2023-1161

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capt…

Fix: 3.6.12 / 4.0.4+
Fix from $1,950 2023-03-06
Wireshark MEDIUM 6.5
CVE-2023-0415

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Fix: after 4.0.2
Fix from $1,600 2023-01-26
Wireshark MEDIUM 6.5
CVE-2023-0416

GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Fix: after 4.0.2
Fix from $1,600 2023-01-26
Wireshark MEDIUM 6.5
CVE-2023-0417

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture…

Fix: after 4.0.2
Fix from $1,600 2023-01-26
Wireshark HIGH 7.1
CVE-2023-0412

TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Fix: after 4.0.2
Fix from $1,950 2023-01-26
Wireshark MEDIUM 6.5
CVE-2023-0411

Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted c…

Fix: after 4.0.2
Fix from $1,600 2023-01-26
Wireshark MEDIUM 6.5
CVE-2023-0413

Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Fix: after 4.0.2
Fix from $1,600 2023-01-26
Wireshark MEDIUM 6.5
CVE-2023-0414

Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file

Fix: after 4.0.2
Fix from $1,600 2023-01-26
Wireshark MEDIUM 6.5
CVE-2022-4345

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packe…

Fix: 3.6.10 / 4.0.2+
Fix from $1,600 2023-01-12
Wireshark HIGH 7.5
CVE-2022-3724

Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows

Fix: after 3.6.8
Fix from $1,950 2022-12-09
Wireshark HIGH 7.5
CVE-2022-3725

Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file

Fix: after 3.6.8
Fix from $1,950 2022-10-27
Wireshark MEDIUM 5.5
CVE-2022-3190

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injec…

Fix: 3.4.16 / 3.6.8+
Fix from $1,600 2022-09-13