Browse CVEs

HIGH 7.5 CVE-2023-4511 BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file Wireshark after 4.0.7 Fix from $1,9502023-08-24 HIGH 7.5 CVE-2023-4512 CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file Wireshark after 4.0.7 Fix from $1,9502023-08-24 HIGH 7.5 CVE-2023-4513 BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file Wireshark after 4.0.7 Fix from $1,9502023-08-24 MEDIUM 5.5 CVE-2023-3648 Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file Wireshark after 4.0.6 Fix from $1,6002023-07-14 MEDIUM 5.5 CVE-2023-3649 iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file Wireshark after 4.0.6 Fix from $1,6002023-07-14 MEDIUM 6.5 CVE-2023-0666 Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to… Wireshark 4.0.6+ Fix from $1,6002023-06-07 MEDIUM 6.5 CVE-2023-0667 Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration,… Wireshark 4.0.6+ Fix from $1,6002023-06-07 MEDIUM 6.5 CVE-2023-0668 Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is suscep… Wireshark 3.6.14 / 4.0.6+ Fix from $1,6002023-06-07 MEDIUM 6.5 CVE-2023-2952 XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file Wireshark 3.6.14 / 4.0.6+ Fix from $1,6002023-05-30 HIGH 7.5 CVE-2023-2879 GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file Wireshark 3.6.14 / 4.0.6+ Fix from $1,9502023-05-26 MEDIUM 6.5 CVE-2023-2857 BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Wireshark 3.6.14 / 4.0.6+ Fix from $1,6002023-05-26 MEDIUM 6.5 CVE-2023-2858 NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Wireshark 3.6.14 / 4.0.6+ Fix from $1,6002023-05-26 MEDIUM 6.5 CVE-2023-2854 BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Wireshark 3.6.14 / 4.0.6+ Fix from $1,6002023-05-26 MEDIUM 6.5 CVE-2023-2855 Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Wireshark 3.6.14 / 4.0.6+ Fix from $1,6002023-05-26 MEDIUM 6.5 CVE-2023-2856 VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Wireshark 3.6.14 / 4.0.6+ Fix from $1,6002023-05-26 MEDIUM 6.5 CVE-2023-1994 GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file Wireshark 3.6.13 / 4.0.5+ Fix from $1,6002023-04-12 MEDIUM 6.5 CVE-2023-1993 LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file Wireshark 3.6.13 / 4.0.5+ Fix from $1,6002023-04-12 HIGH 7.5 CVE-2023-1992 RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file Wireshark 3.6.13 / 4.0.5+ Fix from $1,9502023-04-12 HIGH 7.1 CVE-2023-1161 ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capt… Wireshark 3.6.12 / 4.0.4+ Fix from $1,9502023-03-06 MEDIUM 6.5 CVE-2023-0415 iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Wireshark after 4.0.2 Fix from $1,6002023-01-26 MEDIUM 6.5 CVE-2023-0416 GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Wireshark after 4.0.2 Fix from $1,6002023-01-26 MEDIUM 6.5 CVE-2023-0417 Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture… Wireshark after 4.0.2 Fix from $1,6002023-01-26 HIGH 7.1 CVE-2023-0412 TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Wireshark after 4.0.2 Fix from $1,9502023-01-26 MEDIUM 6.5 CVE-2023-0411 Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted c… Wireshark after 4.0.2 Fix from $1,6002023-01-26 MEDIUM 6.5 CVE-2023-0413 Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Wireshark after 4.0.2 Fix from $1,6002023-01-26 MEDIUM 6.5 CVE-2023-0414 Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file Wireshark after 4.0.2 Fix from $1,6002023-01-26 MEDIUM 6.5 CVE-2022-4345 Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packe… Wireshark 3.6.10 / 4.0.2+ Fix from $1,6002023-01-12 HIGH 7.5 CVE-2022-3724 Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows Wireshark after 3.6.8 Fix from $1,9502022-12-09 HIGH 7.5 CVE-2022-3725 Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file Wireshark after 3.6.8 Fix from $1,9502022-10-27 MEDIUM 5.5 CVE-2022-3190 Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injec… Wireshark 3.4.16 / 3.6.8+ Fix from $1,6002022-09-13