Browse CVEs

MEDIUM 6.5 CVE-2026-0959 IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service Wireshark 4.4.13 / 4.6.3+ Fix from $1,6002026-01-14 MEDIUM 5.5 CVE-2026-0960 HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service Wireshark 4.4.13 / 4.6.3+ Fix from $1,6002026-01-14 MEDIUM 5.5 CVE-2025-13946 MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service Wireshark 4.4.12 / 4.6.2+ Fix from $1,6002025-12-03 MEDIUM 5.5 CVE-2025-13945 HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service Wireshark 4.6.2+ Fix from $1,6002025-12-03 MEDIUM 5.5 CVE-2025-13674 BPv7 dissector crash in Wireshark 4.6.0 allows denial of service Wireshark Mitigation only Fix from $1,6002025-11-26 MEDIUM 5.5 CVE-2025-13499 Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service Wireshark 4.4.11+ Fix from $1,6002025-11-21 MEDIUM 5.5 CVE-2025-11626 MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service Wireshark 4.2.14 / 4.4.10+ Fix from $1,6002025-10-10 HIGH 7.5 CVE-2025-9817 SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service Wireshark after 4.4.8 Fix from $1,9502025-09-03 MEDIUM 6.5 CVE-2025-5601 Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file Wireshark 4.2.12 / 4.4.7+ Fix from $1,6002025-06-04 HIGH 7.5 CVE-2025-1492 Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted c… Wireshark after 4.4.3 Fix from $1,9502025-02-20 MEDIUM 5.5 CVE-2024-11596 ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file Wireshark 4.2.9 / 4.4.2+ Fix from $1,6002024-11-21 MEDIUM 5.5 CVE-2024-11595 FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture fi… Wireshark 4.2.9 / 4.4.2+ Fix from $1,6002024-11-21 HIGH 7.5 CVE-2024-9781 AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture f… Wireshark 4.2.8+ Fix from $1,9502024-10-10 MEDIUM 5.5 CVE-2024-9780 ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file Wireshark No fix yet Fix from $1,6002024-10-10 MEDIUM 5.5 CVE-2024-8645 SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file Wireshark 4.0.16 / 4.2.6+ Fix from $1,6002024-09-10 MEDIUM 5.5 CVE-2024-8250 NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file Wireshark 4.0.17 / 4.2.7+ Fix from $1,6002024-08-29 MEDIUM 5.5 CVE-2024-4855 Use after free issue in editcap could cause denial of service via crafted capture file Wireshark 3.6.23 / 4.0.15+ Fix from $1,6002024-05-14 MEDIUM 5.5 CVE-2024-4853 Memory handling issue in editcap could cause denial of service via crafted capture file Wireshark 3.6.23 / 4.0.15+ Fix from $1,6002024-05-14 HIGH 7.5 CVE-2024-2955 T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file Wireshark 4.0.14 / 4.2.4+ Fix from $1,9502024-03-26 HIGH 7.8 CVE-2023-6175 NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file Wireshark after 4.0.10 Fix from $1,9502024-03-26 HIGH 7.5 CVE-2024-24479 A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part… Wireshark 4.2.0+ Fix from $1,9502024-02-21 HIGH 7.5 CVE-2024-24478 An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_t… Wireshark 4.2.0+ Fix from $1,9502024-02-21 HIGH 7.5 CVE-2024-0210 Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Wireshark No fix yet Fix from $1,9502024-01-03 HIGH 7.5 CVE-2024-0211 DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Wireshark No fix yet Fix from $1,9502024-01-03 HIGH 7.5 CVE-2024-0207 HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Wireshark No fix yet Fix from $1,9502024-01-03 HIGH 7.5 CVE-2024-0208 GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file Wireshark after 4.0.11 Fix from $1,9502024-01-03 HIGH 7.5 CVE-2024-0209 IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture… Wireshark after 4.0.11 Fix from $1,9502024-01-03 MEDIUM 6.5 CVE-2023-6174 SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file Wireshark after 4.0.10 Fix from $1,6002023-11-16 MEDIUM 6.5 CVE-2023-5371 RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file Wireshark 3.6.17 / 4.0.9+ Fix from $1,6002023-10-04 MEDIUM 6.5 CVE-2023-2906 Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a d… Wireshark after 4.0.7 Fix from $1,6002023-08-25