Browse high-severity CVEs

Wireshark MEDIUM 5.5

CVE-2025-13674

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service

Mitigation only

Fix from $1,600 2025-11-26

Wireshark MEDIUM 5.5

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file

No fix yet

Fix from $1,600 2024-10-10

Wireshark HIGH 7.5

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

No fix yet

Fix from $1,950 2024-01-03

Wireshark HIGH 7.5

CVE-2024-0211

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

No fix yet

Fix from $1,950 2024-01-03

Wireshark HIGH 7.5

CVE-2024-0207

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

No fix yet

Fix from $1,950 2024-01-03

Wireshark HIGH 7.5

CVE-2018-11354

In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to…

Mitigation only

Fix from $1,950 2018-05-22

Wireshark HIGH 7.5

CVE-2018-11355

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet stat…

Mitigation only

Fix from $1,950 2018-05-22

Wireshark HIGH 7.5

CVE-2018-11361

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow dur…

Mitigation only

Fix from $1,950 2018-05-22

Wireshark HIGH 7.5

CVE-2017-17083

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensurin…

Mitigation only

Fix from $1,950 2017-12-01

Wireshark HIGH 7.5

CVE-2017-17084

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by val…

Mitigation only

Fix from $1,950 2017-12-01

Wireshark HIGH 7.5

CVE-2017-17085EPSS 17%

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by va…

No fix yet

Fix from $1,950 2017-12-01

Wireshark MEDIUM 5.5

CVE-2017-9616

In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/fil…

Mitigation only

Fix from $1,600 2017-06-14

Wireshark MEDIUM 5.9

CVE-2016-9376

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture …

Mitigation only

Fix from $1,600 2016-11-17

Wireshark MEDIUM 5.9

CVE-2016-9375

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. Thi…

Mitigation only

Fix from $1,600 2016-11-17

Wireshark MEDIUM 5.9

CVE-2016-9374

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture …

Mitigation only

Fix from $1,600 2016-11-17

Wireshark MEDIUM 5.9

CVE-2016-9373

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture fil…

Mitigation only

Fix from $1,600 2016-11-17

Wireshark MEDIUM 5.9

CVE-2016-9372

In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in…

No fix yet

Fix from $1,600 2016-11-17

Wireshark MEDIUM 5.9

CVE-2016-6513

epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attack…

Mitigation only