Vulnerability index

Browse CVEs

593 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wireshark HIGH 7.5
CVE-2018-14368

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-14369

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-14370

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bound…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-11354

In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to…

Mitigation only
Fix from $1,950 2018-05-22
Wireshark HIGH 7.5
CVE-2018-11355

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet stat…

Mitigation only
Fix from $1,950 2018-05-22
Wireshark HIGH 7.5
CVE-2018-11356

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoidin…

Fix: after 2.4.6
Fix from $1,950 2018-05-22
Wireshark HIGH 7.5
CVE-2018-11357

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in…

Fix: after 2.4.6
Fix from $1,950 2018-05-22
Wireshark HIGH 7.5
CVE-2018-11358

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoi…

Fix: after 2.4.6
Fix from $1,950 2018-05-22
Wireshark HIGH 7.5
CVE-2018-11359

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by av…

Fix: after 2.4.6
Fix from $1,950 2018-05-22
Wireshark HIGH 7.5
CVE-2018-11360

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dta…

Fix: after 2.4.6
Fix from $1,950 2018-05-22
Wireshark HIGH 7.5
CVE-2018-11361

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow dur…

Mitigation only
Fix from $1,950 2018-05-22
Wireshark HIGH 7.5
CVE-2018-11362

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoid…

Fix: after 2.4.6
Fix from $1,950 2018-05-22
Wireshark HIGH 7.5
CVE-2018-9265

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-tn3270.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9266

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-isup.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9267

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9268

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9269

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-giop.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9270

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9271

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9272

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9273

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9274

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_message.c has a memory leak.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9256

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting th…

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a n…

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9258

In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources.

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9259

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the b…

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9260

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c b…

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9261

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This w…

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9262

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN…

Fix: after 2.4.5
Fix from $1,950 2018-04-04
Wireshark HIGH 7.5
CVE-2018-9263

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was addressed in epan/dissectors/packet-kerberos.c by ensur…

Fix: after 2.4.5
Fix from $1,950 2018-04-04