Vulnerability index

Browse CVEs

593 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wireshark MEDIUM 6.5
CVE-2022-0585

Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted c…

Fix: 3.4.12 / 3.6.2+
Fix from $1,600 2022-02-18
Wireshark HIGH 7.5
CVE-2022-0583

Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture…

Fix: 3.4.12 / 3.6.2+
Fix from $1,950 2022-02-14
Wireshark HIGH 7.5
CVE-2022-0586

Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted ca…

Fix: 3.4.12 / 3.6.2+
Fix from $1,950 2022-02-14
Wireshark CRITICAL 9.8
CVE-2022-0582

Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or cra…

Fix: 3.4.12+
Fix from $2,300 2022-02-14
Wireshark HIGH 7.5
CVE-2022-0581

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture …

Fix: 3.4.12 / 3.6.2+
Fix from $1,950 2022-02-14
Wireshark HIGH 7.5
CVE-2021-4181

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

Fix: 3.4.11+
Fix from $1,950 2021-12-30
Wireshark HIGH 7.5
CVE-2021-4182

Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

Fix: 3.4.11+
Fix from $1,950 2021-12-30
Wireshark HIGH 7.5
CVE-2021-4184

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture…

Fix: after 3.4.10
Fix from $1,950 2021-12-30
Wireshark HIGH 7.5
CVE-2021-4185

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

Fix: 3.4.11+
Fix from $1,950 2021-12-30
Wireshark HIGH 7.5
CVE-2021-4186

Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

Fix: after 3.4.10
Fix from $1,950 2021-12-30
Wireshark HIGH 7.5
CVE-2021-4190

Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file

Fix: 3.4.12+
Fix from $1,950 2021-12-30
Wireshark MEDIUM 5.5
CVE-2021-4183

Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file

Patch available
Fix from $1,600 2021-12-30
Wireshark HIGH 7.5
CVE-2021-39921

NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or craft…

Fix: after 3.4.9
Fix from $1,950 2021-11-19
Wireshark HIGH 7.5
CVE-2021-39922EPSS 5%

Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capt…

Fix: after 3.4.9
Fix from $1,950 2021-11-19
Wireshark HIGH 7.5
CVE-2021-39923

Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

Fix: after 3.4.9
Fix from $1,950 2021-11-19
Wireshark HIGH 7.5
CVE-2021-39924

Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted ca…

Fix: after 3.4.9
Fix from $1,950 2021-11-19
Wireshark HIGH 7.5
CVE-2021-39925EPSS 8%

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or craft…

Fix: after 3.4.9
Fix from $1,950 2021-11-19
Wireshark HIGH 7.5
CVE-2021-39926EPSS 8%

Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file

Fix: after 3.4.9
Fix from $1,950 2021-11-19
Wireshark HIGH 7.5
CVE-2021-39929

Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection o…

Fix: after 3.4.9
Fix from $1,950 2021-11-19
Wireshark HIGH 7.5
CVE-2021-39920

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file

Fix: 3.4.10+
Fix from $1,950 2021-11-18
Wireshark HIGH 7.5
CVE-2021-39928EPSS 6%

NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or …

Fix: 3.2.18 / 3.4.10+
Fix from $1,950 2021-11-18
Wireshark HIGH 7.5
CVE-2021-22235

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file

Fix: 3.2.15 / 3.4.7+
Fix from $1,950 2021-07-20
Wireshark HIGH 7.5
CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file

Fix: after 3.4.5
Fix from $1,950 2021-06-07
Wireshark MEDIUM 6.5
CVE-2021-22207

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or cra…

Fix: after 3.4.4
Fix from $1,600 2021-04-23
Wireshark HIGH 8.8
CVE-2021-22191

Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture f…

Fix: after 3.4.3
Fix from $1,950 2021-03-15
Wireshark HIGH 7.5
CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file

Fix: 3.4.3+
Fix from $1,950 2021-02-17
Wireshark HIGH 7.5
CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file

Fix: 3.4.3+
Fix from $1,950 2021-02-17
Wireshark MEDIUM 5.3
CVE-2020-26422

Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file

Patch available
Fix from $1,600 2020-12-21
Wireshark MEDIUM 5.3
CVE-2020-26418

Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Fix: after 3.2.8
Fix from $1,600 2020-12-11
Wireshark MEDIUM 5.3
CVE-2020-26419

Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.

Patch available
Fix from $1,600 2020-12-11