Browse CVEs

MEDIUM 6.5 CVE-2022-0585 Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted c… Wireshark 3.4.12 / 3.6.2+ Fix from $1,6002022-02-18 HIGH 7.5 CVE-2022-0583 Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture… Wireshark 3.4.12 / 3.6.2+ Fix from $1,9502022-02-14 HIGH 7.5 CVE-2022-0586 Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted ca… Wireshark 3.4.12 / 3.6.2+ Fix from $1,9502022-02-14 CRITICAL 9.8 CVE-2022-0582 Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or cra… Wireshark 3.4.12+ Fix from $2,3002022-02-14 HIGH 7.5 CVE-2022-0581 Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture … Wireshark 3.4.12 / 3.6.2+ Fix from $1,9502022-02-14 HIGH 7.5 CVE-2021-4181 Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Wireshark 3.4.11+ Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-4182 Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Wireshark 3.4.11+ Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-4184 Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture… Wireshark after 3.4.10 Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-4185 Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Wireshark 3.4.11+ Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-4186 Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Wireshark after 3.4.10 Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-4190 Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file Wireshark 3.4.12+ Fix from $1,9502021-12-30 MEDIUM 5.5 CVE-2021-4183 Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file Wireshark Patch available Fix from $1,6002021-12-30 HIGH 7.5 CVE-2021-39921 NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or craft… Wireshark after 3.4.9 Fix from $1,9502021-11-19 HIGH 7.5 CVE-2021-39922EPSS 5% Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capt… Wireshark after 3.4.9 Fix from $1,9502021-11-19 HIGH 7.5 CVE-2021-39923 Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file Wireshark after 3.4.9 Fix from $1,9502021-11-19 HIGH 7.5 CVE-2021-39924 Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted ca… Wireshark after 3.4.9 Fix from $1,9502021-11-19 HIGH 7.5 CVE-2021-39925EPSS 8% Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or craft… Wireshark after 3.4.9 Fix from $1,9502021-11-19 HIGH 7.5 CVE-2021-39926EPSS 8% Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file Wireshark after 3.4.9 Fix from $1,9502021-11-19 HIGH 7.5 CVE-2021-39929 Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection o… Wireshark after 3.4.9 Fix from $1,9502021-11-19 HIGH 7.5 CVE-2021-39920 NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file Wireshark 3.4.10+ Fix from $1,9502021-11-18 HIGH 7.5 CVE-2021-39928EPSS 6% NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or … Wireshark 3.2.18 / 3.4.10+ Fix from $1,9502021-11-18 HIGH 7.5 CVE-2021-22235 Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file Wireshark 3.2.15 / 3.4.7+ Fix from $1,9502021-07-20 HIGH 7.5 CVE-2021-22222 Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file Wireshark after 3.4.5 Fix from $1,9502021-06-07 MEDIUM 6.5 CVE-2021-22207 Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or cra… Wireshark after 3.4.4 Fix from $1,6002021-04-23 HIGH 8.8 CVE-2021-22191 Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture f… Wireshark after 3.4.3 Fix from $1,9502021-03-15 HIGH 7.5 CVE-2021-22173 Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file Wireshark 3.4.3+ Fix from $1,9502021-02-17 HIGH 7.5 CVE-2021-22174 Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file Wireshark 3.4.3+ Fix from $1,9502021-02-17 MEDIUM 5.3 CVE-2020-26422 Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file Wireshark Patch available Fix from $1,6002020-12-21 MEDIUM 5.3 CVE-2020-26418 Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. Wireshark after 3.2.8 Fix from $1,6002020-12-11 MEDIUM 5.3 CVE-2020-26419 Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file. Wireshark Patch available Fix from $1,6002020-12-11