Vulnerability index

Browse CVEs

593 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wireshark HIGH 7.5
CVE-2019-10894EPSS 6%

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by …

Fix: after 2.6.7
Fix from $1,950 2019-04-09
Wireshark HIGH 7.5
CVE-2019-9208

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding…

Fix: after 2.6.6
Fix from $1,950 2019-02-28
Wireshark HIGH 7.5
CVE-2019-9214

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an…

Fix: after 2.6.6
Fix from $1,950 2019-02-28
Wireshark MEDIUM 5.5
CVE-2019-9209

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c…

Fix: after 2.6.6
Fix from $1,600 2019-02-28
Wireshark MEDIUM 5.5
CVE-2019-5716

In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB befor…

Fix: after 2.6.5
Fix from $1,600 2019-01-08
Wireshark MEDIUM 5.5
CVE-2019-5717

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting t…

Fix: after 2.6.5
Fix from $1,600 2019-01-08
Wireshark MEDIUM 5.5
CVE-2019-5718

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by …

Fix: after 2.6.5
Fix from $1,600 2019-01-08
Wireshark MEDIUM 5.5
CVE-2019-5719

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly …

Fix: after 2.6.5
Fix from $1,600 2019-01-08
Wireshark MEDIUM 5.5
CVE-2019-5721

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management a…

Fix: after 2.4.11
Fix from $1,600 2019-01-08
Wireshark HIGH 7.5
CVE-2018-19622

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse…

Fix: after 2.6.4
Fix from $1,950 2018-11-29
Wireshark HIGH 7.5
CVE-2018-19623

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any m…

Fix: after 2.6.4
Fix from $1,950 2018-11-29
Wireshark HIGH 7.5
CVE-2018-19627EPSS 18%

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer bo…

Fix: after 2.6.4
Fix from $1,950 2018-11-29
Wireshark HIGH 7.5
CVE-2018-19628

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a d…

Fix: after 2.6.4
Fix from $1,950 2018-11-29
Wireshark MEDIUM 5.5
CVE-2018-19624

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a…

Fix: after 2.6.4
Fix from $1,600 2018-11-29
Wireshark MEDIUM 5.5
CVE-2018-19625

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a hea…

Fix: after 2.6.4
Fix from $1,600 2018-11-29
Wireshark MEDIUM 5.5
CVE-2018-19626

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' t…

Fix: after 2.6.4
Fix from $1,600 2018-11-29
Wireshark HIGH 7.5
CVE-2018-18226

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-di…

Fix: after 2.6.3
Fix from $1,950 2018-10-12
Wireshark HIGH 7.5
CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by pr…

Fix: after 2.6.3
Fix from $1,950 2018-10-12
Wireshark HIGH 7.5
CVE-2018-18225

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is c…

Fix: after 2.6.3
Fix from $1,950 2018-10-12
Wireshark HIGH 7.5
CVE-2018-16056

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/…

Fix: after 2.6.2
Fix from $1,950 2018-08-30
Wireshark HIGH 7.5
CVE-2018-16057

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ie…

Fix: after 2.6.2
Fix from $1,950 2018-08-30
Wireshark HIGH 7.5
CVE-2018-16058

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/pa…

Fix: after 2.6.2
Fix from $1,950 2018-08-30
Wireshark HIGH 7.5
CVE-2018-14438

In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which all…

Fix: after 2.6.2
Fix from $1,950 2018-07-20
Wireshark HIGH 7.5
CVE-2018-14339

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-14340

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-14341

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in e…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-14342

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/d…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-14343

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-b…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-14344

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-14367

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by prope…

Fix: after 2.6.1
Fix from $1,950 2018-07-19