CVE Daily – Wireshark (High+Critical) https://cvedaily.com/pages/tags/wireshark.html CVE Daily – Wireshark (High+Critical) en Wed, 03 Jun 2026 21:26:41 +0000 [High] CVE-2026-7785 – A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94... https://nvd.nist.gov/vuln/detail/CVE-2026-7785 https://nvd.nist.gov/vuln/detail/CVE-2026-7785 Tue, 05 May 2026 00:16:17 +0000 High CVE-2026-7785

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quick_capture of the file pyshark_mcp.py. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This product operates o…

CVSS: 7.3 · CWE: CWE-77

View on NVD

]]> [High] CVE-2026-5656 – Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 al... https://nvd.nist.gov/vuln/detail/CVE-2026-5656 https://nvd.nist.gov/vuln/detail/CVE-2026-5656 Fri, 01 May 2026 00:16:25 +0000 High CVE-2026-5656

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS: 7.0 · CWE: CWE-22

View on NVD

]]> [High] CVE-2026-5405 – RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 all... https://nvd.nist.gov/vuln/detail/CVE-2026-5405 https://nvd.nist.gov/vuln/detail/CVE-2026-5405 Fri, 01 May 2026 00:16:24 +0000 High CVE-2026-5405

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS: 7.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2026-5403 – SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of... https://nvd.nist.gov/vuln/detail/CVE-2026-5403 https://nvd.nist.gov/vuln/detail/CVE-2026-5403 Fri, 01 May 2026 00:16:24 +0000 High CVE-2026-5403

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS: 7.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2026-5402 – TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial o... https://nvd.nist.gov/vuln/detail/CVE-2026-5402 https://nvd.nist.gov/vuln/detail/CVE-2026-5402 Thu, 30 Apr 2026 07:16:37 +0000 High CVE-2026-5402

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [Critical] CVE-2026-24060 – Service information is not encrypted when transmitted as BACnet packets over th... https://nvd.nist.gov/vuln/detail/CVE-2026-24060 https://nvd.nist.gov/vuln/detail/CVE-2026-24060 Sat, 21 Mar 2026 00:16:25 +0000 Critical CVE-2026-24060

Service information is not encrypted when transmitted as BACnet packets over the wire, and can be sniffed, intercepted, and modified by an attacker. Valuable information such as the File Start Position and File Data can be sniffed from network traffic using Wireshark's BACnet dissector filter. The proprietary format used by WebCTRL to receive updates from the PLC can also be sniffed and reve…

CVSS: 9.1 · CWE: CWE-319

View on NVD

]]> [High] CVE-2025-13499 – Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of se... https://nvd.nist.gov/vuln/detail/CVE-2025-13499 https://nvd.nist.gov/vuln/detail/CVE-2025-13499 Fri, 21 Nov 2025 06:15:48 +0000 High CVE-2025-13499

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service

CVSS: 7.8 · CWE: CWE-824

View on NVD

]]> [High] CVE-2025-9817 – SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service https://nvd.nist.gov/vuln/detail/CVE-2025-9817 https://nvd.nist.gov/vuln/detail/CVE-2025-9817 Wed, 03 Sep 2025 08:15:31 +0000 High CVE-2025-9817

SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service

CVSS: 7.8 · CWE: CWE-476

View on NVD

]]> [High] CVE-2025-5601 – Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows d... https://nvd.nist.gov/vuln/detail/CVE-2025-5601 https://nvd.nist.gov/vuln/detail/CVE-2025-5601 Wed, 04 Jun 2025 11:15:22 +0000 High CVE-2025-5601

Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-120

View on NVD

]]> [High] CVE-2025-1492 – Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0... https://nvd.nist.gov/vuln/detail/CVE-2025-1492 https://nvd.nist.gov/vuln/detail/CVE-2025-1492 Thu, 20 Feb 2025 02:15:38 +0000 High CVE-2025-1492

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-674

View on NVD

]]> [High] CVE-2024-11596 – ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denia... https://nvd.nist.gov/vuln/detail/CVE-2024-11596 https://nvd.nist.gov/vuln/detail/CVE-2024-11596 Thu, 21 Nov 2024 11:15:33 +0000 High CVE-2024-11596

ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-126

View on NVD

]]> [High] CVE-2024-11595 – FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2... https://nvd.nist.gov/vuln/detail/CVE-2024-11595 https://nvd.nist.gov/vuln/detail/CVE-2024-11595 Thu, 21 Nov 2024 11:15:32 +0000 High CVE-2024-11595

FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-835

View on NVD

]]> [High] CVE-2024-9781 – AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2... https://nvd.nist.gov/vuln/detail/CVE-2024-9781 https://nvd.nist.gov/vuln/detail/CVE-2024-9781 Thu, 10 Oct 2024 07:15:04 +0000 High CVE-2024-9781

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-230

View on NVD

]]> [High] CVE-2024-9780 – ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injec... https://nvd.nist.gov/vuln/detail/CVE-2024-9780 https://nvd.nist.gov/vuln/detail/CVE-2024-9780 Thu, 10 Oct 2024 07:15:03 +0000 High CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-456

View on NVD

]]> [High] CVE-2024-8250 – NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows d... https://nvd.nist.gov/vuln/detail/CVE-2024-8250 https://nvd.nist.gov/vuln/detail/CVE-2024-8250 Thu, 29 Aug 2024 00:15:09 +0000 High CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-825

View on NVD

]]> [High] CVE-2024-2955 – T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows deni... https://nvd.nist.gov/vuln/detail/CVE-2024-2955 https://nvd.nist.gov/vuln/detail/CVE-2024-2955 Tue, 26 Mar 2024 20:15:11 +0000 High CVE-2024-2955

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-762

View on NVD

]]> [High] CVE-2023-6175 – NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 all... https://nvd.nist.gov/vuln/detail/CVE-2023-6175 https://nvd.nist.gov/vuln/detail/CVE-2023-6175 Tue, 26 Mar 2024 08:15:35 +0000 High CVE-2023-6175

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file

CVSS: 7.8 · CWE: CWE-120

View on NVD

]]> [High] CVE-2024-24479 – A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a ... https://nvd.nist.gov/vuln/detail/CVE-2024-24479 https://nvd.nist.gov/vuln/detail/CVE-2024-24479 Wed, 21 Feb 2024 19:15:09 +0000 High CVE-2024-24479

A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

CVSS: 7.5 · CWE: CWE-120

View on NVD

]]> [High] CVE-2024-24476 – A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a ... https://nvd.nist.gov/vuln/detail/CVE-2024-24476 https://nvd.nist.gov/vuln/detail/CVE-2024-24476 Wed, 21 Feb 2024 19:15:09 +0000 High CVE-2024-24476

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2024-24478 – An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of... https://nvd.nist.gov/vuln/detail/CVE-2024-24478 https://nvd.nist.gov/vuln/detail/CVE-2024-24478 Wed, 21 Feb 2024 17:15:09 +0000 High CVE-2024-24478

An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

CVSS: 7.5 · CWE: CWE-680

View on NVD

]]> [High] CVE-2024-0211 – DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet in... https://nvd.nist.gov/vuln/detail/CVE-2024-0211 https://nvd.nist.gov/vuln/detail/CVE-2024-0211 Wed, 03 Jan 2024 08:15:11 +0000 High CVE-2024-0211

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-835

View on NVD

]]> [High] CVE-2024-0210 – Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packe... https://nvd.nist.gov/vuln/detail/CVE-2024-0210 https://nvd.nist.gov/vuln/detail/CVE-2024-0210 Wed, 03 Jan 2024 08:15:11 +0000 High CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-674

View on NVD

]]> [High] CVE-2024-0209 – IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3... https://nvd.nist.gov/vuln/detail/CVE-2024-0209 https://nvd.nist.gov/vuln/detail/CVE-2024-0209 Wed, 03 Jan 2024 08:15:10 +0000 High CVE-2024-0209

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-476

View on NVD

]]> [High] CVE-2024-0208 – GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 al... https://nvd.nist.gov/vuln/detail/CVE-2024-0208 https://nvd.nist.gov/vuln/detail/CVE-2024-0208 Wed, 03 Jan 2024 08:15:10 +0000 High CVE-2024-0208

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-230

View on NVD

]]> [High] CVE-2024-0207 – HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet inj... https://nvd.nist.gov/vuln/detail/CVE-2024-0207 https://nvd.nist.gov/vuln/detail/CVE-2024-0207 Wed, 03 Jan 2024 08:15:10 +0000 High CVE-2024-0207

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-125

View on NVD

]]> [High] CVE-2021-4190 – Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service vi... https://nvd.nist.gov/vuln/detail/CVE-2021-4190 https://nvd.nist.gov/vuln/detail/CVE-2021-4190 Thu, 30 Dec 2021 22:15:10 +0000 High CVE-2021-4190

Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-834

View on NVD

]]> [High] CVE-2021-4185 – Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allo... https://nvd.nist.gov/vuln/detail/CVE-2021-4185 https://nvd.nist.gov/vuln/detail/CVE-2021-4185 Thu, 30 Dec 2021 22:15:10 +0000 High CVE-2021-4185

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2021-4184 – Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3... https://nvd.nist.gov/vuln/detail/CVE-2021-4184 https://nvd.nist.gov/vuln/detail/CVE-2021-4184 Thu, 30 Dec 2021 22:15:10 +0000 High CVE-2021-4184

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2021-4182 – Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows de... https://nvd.nist.gov/vuln/detail/CVE-2021-4182 https://nvd.nist.gov/vuln/detail/CVE-2021-4182 Thu, 30 Dec 2021 22:15:10 +0000 High CVE-2021-4182

Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2021-4181 – Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allow... https://nvd.nist.gov/vuln/detail/CVE-2021-4181 https://nvd.nist.gov/vuln/detail/CVE-2021-4181 Thu, 30 Dec 2021 22:15:10 +0000 High CVE-2021-4181

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2021-39929 – Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4... https://nvd.nist.gov/vuln/detail/CVE-2021-39929 https://nvd.nist.gov/vuln/detail/CVE-2021-39929 Fri, 19 Nov 2021 17:15:08 +0000 High CVE-2021-39929

Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-674

View on NVD

]]> [High] CVE-2021-39926 – Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 a... https://nvd.nist.gov/vuln/detail/CVE-2021-39926 https://nvd.nist.gov/vuln/detail/CVE-2021-39926 Fri, 19 Nov 2021 17:15:08 +0000 High CVE-2021-39926

Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-120

View on NVD

]]> [High] CVE-2021-39925 – Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3... https://nvd.nist.gov/vuln/detail/CVE-2021-39925 https://nvd.nist.gov/vuln/detail/CVE-2021-39925 Fri, 19 Nov 2021 17:15:08 +0000 High CVE-2021-39925

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-120

View on NVD

]]> [High] CVE-2021-39924 – Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 ... https://nvd.nist.gov/vuln/detail/CVE-2021-39924 https://nvd.nist.gov/vuln/detail/CVE-2021-39924 Fri, 19 Nov 2021 17:15:08 +0000 High CVE-2021-39924

Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-834

View on NVD

]]> [High] CVE-2021-39923 – Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17... https://nvd.nist.gov/vuln/detail/CVE-2021-39923 https://nvd.nist.gov/vuln/detail/CVE-2021-39923 Fri, 19 Nov 2021 17:15:08 +0000 High CVE-2021-39923

Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-834

View on NVD

]]> [High] CVE-2021-39922 – Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to... https://nvd.nist.gov/vuln/detail/CVE-2021-39922 https://nvd.nist.gov/vuln/detail/CVE-2021-39922 Fri, 19 Nov 2021 17:15:08 +0000 High CVE-2021-39922

Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-120

View on NVD

]]> [High] CVE-2021-39921 – NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3... https://nvd.nist.gov/vuln/detail/CVE-2021-39921 https://nvd.nist.gov/vuln/detail/CVE-2021-39921 Fri, 19 Nov 2021 17:15:08 +0000 High CVE-2021-39921

NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2021-39928 – NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 ... https://nvd.nist.gov/vuln/detail/CVE-2021-39928 https://nvd.nist.gov/vuln/detail/CVE-2021-39928 Thu, 18 Nov 2021 19:15:08 +0000 High CVE-2021-39928

NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2021-39920 – NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allow... https://nvd.nist.gov/vuln/detail/CVE-2021-39920 https://nvd.nist.gov/vuln/detail/CVE-2021-39920 Thu, 18 Nov 2021 19:15:08 +0000 High CVE-2021-39920

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2021-22235 – Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows de... https://nvd.nist.gov/vuln/detail/CVE-2021-22235 https://nvd.nist.gov/vuln/detail/CVE-2021-22235 Tue, 20 Jul 2021 12:15:07 +0000 High CVE-2021-22235

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2021-22222 – Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial o... https://nvd.nist.gov/vuln/detail/CVE-2021-22222 https://nvd.nist.gov/vuln/detail/CVE-2021-22222 Mon, 07 Jun 2021 13:15:07 +0000 High CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2020-28030 – In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed... https://nvd.nist.gov/vuln/detail/CVE-2020-28030 https://nvd.nist.gov/vuln/detail/CVE-2020-28030 Mon, 02 Nov 2020 21:15:30 +0000 High CVE-2020-28030

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement.

CVSS: 7.5 · CWE: CWE-682

View on NVD

]]> [High] CVE-2020-26575 – In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector co... https://nvd.nist.gov/vuln/detail/CVE-2020-26575 https://nvd.nist.gov/vuln/detail/CVE-2020-26575 Tue, 06 Oct 2020 15:15:15 +0000 High CVE-2020-26575

In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2020-25866 – In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has... https://nvd.nist.gov/vuln/detail/CVE-2020-25866 https://nvd.nist.gov/vuln/detail/CVE-2020-25866 Tue, 06 Oct 2020 15:15:15 +0000 High CVE-2020-25866

In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2020-25863 – In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Mult... https://nvd.nist.gov/vuln/detail/CVE-2020-25863 https://nvd.nist.gov/vuln/detail/CVE-2020-25863 Tue, 06 Oct 2020 15:15:15 +0000 High CVE-2020-25863

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2020-25862 – In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP disse... https://nvd.nist.gov/vuln/detail/CVE-2020-25862 https://nvd.nist.gov/vuln/detail/CVE-2020-25862 Tue, 06 Oct 2020 15:15:15 +0000 High CVE-2020-25862

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by changing the handling of the invalid 0xFFFF checksum.

CVSS: 7.5 · CWE: CWE-354

View on NVD

]]> [High] CVE-2020-15466 – In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. ... https://nvd.nist.gov/vuln/detail/CVE-2020-15466 https://nvd.nist.gov/vuln/detail/CVE-2020-15466 Sun, 05 Jul 2020 11:15:09 +0000 High CVE-2020-15466

In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2020-13164 – In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS disse... https://nvd.nist.gov/vuln/detail/CVE-2020-13164 https://nvd.nist.gov/vuln/detail/CVE-2020-13164 Tue, 19 May 2020 22:15:12 +0000 High CVE-2020-13164

In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem.

CVSS: 7.5 · CWE: CWE-674

View on NVD

]]> [High] CVE-2020-11647 – In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dis... https://nvd.nist.gov/vuln/detail/CVE-2020-11647 https://nvd.nist.gov/vuln/detail/CVE-2020-11647 Fri, 10 Apr 2020 21:15:11 +0000 High CVE-2020-11647

In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion.

CVSS: 7.5 · CWE: CWE-674

View on NVD

]]> [High] CVE-2020-9431 – In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC di... https://nvd.nist.gov/vuln/detail/CVE-2020-9431 https://nvd.nist.gov/vuln/detail/CVE-2020-9431 Thu, 27 Feb 2020 23:15:13 +0000 High CVE-2020-9431

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations.

CVSS: 7.5 · CWE: CWE-401

View on NVD

]]> [High] CVE-2020-9430 – In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMA... https://nvd.nist.gov/vuln/detail/CVE-2020-9430 https://nvd.nist.gov/vuln/detail/CVE-2020-9430 Thu, 27 Feb 2020 23:15:12 +0000 High CVE-2020-9430

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2020-9429 – In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addre... https://nvd.nist.gov/vuln/detail/CVE-2020-9429 https://nvd.nist.gov/vuln/detail/CVE-2020-9429 Thu, 27 Feb 2020 23:15:12 +0000 High CVE-2020-9429

In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2020-9428 – In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissec... https://nvd.nist.gov/vuln/detail/CVE-2020-9428 https://nvd.nist.gov/vuln/detail/CVE-2020-9428 Thu, 27 Feb 2020 23:15:12 +0000 High CVE-2020-9428

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2020-7044 – In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addre... https://nvd.nist.gov/vuln/detail/CVE-2020-7044 https://nvd.nist.gov/vuln/detail/CVE-2020-7044 Thu, 16 Jan 2020 04:15:11 +0000 High CVE-2020-7044

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2019-19553 – In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. ... https://nvd.nist.gov/vuln/detail/CVE-2019-19553 https://nvd.nist.gov/vuln/detail/CVE-2019-19553 Thu, 05 Dec 2019 01:15:14 +0000 High CVE-2019-19553

In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.

CVSS: 7.5 · CWE: CWE-909

View on NVD

]]> [High] CVE-2019-16319 – In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go ... https://nvd.nist.gov/vuln/detail/CVE-2019-16319 https://nvd.nist.gov/vuln/detail/CVE-2019-16319 Sun, 15 Sep 2019 16:15:13 +0000 High CVE-2019-16319

In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2019-13619 – In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER ... https://nvd.nist.gov/vuln/detail/CVE-2019-13619 https://nvd.nist.gov/vuln/detail/CVE-2019-13619 Wed, 17 Jul 2019 20:15:11 +0000 High CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2019-12295 – In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection... https://nvd.nist.gov/vuln/detail/CVE-2019-12295 https://nvd.nist.gov/vuln/detail/CVE-2019-12295 Thu, 23 May 2019 12:29:00 +0000 High CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

CVSS: 7.5 · CWE: CWE-674

View on NVD

]]> [High] CVE-2019-10903 – In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS diss... https://nvd.nist.gov/vuln/detail/CVE-2019-10903 https://nvd.nist.gov/vuln/detail/CVE-2019-10903 Tue, 09 Apr 2019 04:29:01 +0000 High CVE-2019-10903

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2019-10902 – In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/... https://nvd.nist.gov/vuln/detail/CVE-2019-10902 https://nvd.nist.gov/vuln/detail/CVE-2019-10902 Tue, 09 Apr 2019 04:29:01 +0000 High CVE-2019-10902

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.

CVSS: 7.5 · CWE: CWE-252

View on NVD

]]> [High] CVE-2019-10901 – In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector coul... https://nvd.nist.gov/vuln/detail/CVE-2019-10901 https://nvd.nist.gov/vuln/detail/CVE-2019-10901 Tue, 09 Apr 2019 04:29:01 +0000 High CVE-2019-10901

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2019-10900 – In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was a... https://nvd.nist.gov/vuln/detail/CVE-2019-10900 https://nvd.nist.gov/vuln/detail/CVE-2019-10900 Tue, 09 Apr 2019 04:29:01 +0000 High CVE-2019-10900

In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely.

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2019-10899 – In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector co... https://nvd.nist.gov/vuln/detail/CVE-2019-10899 https://nvd.nist.gov/vuln/detail/CVE-2019-10899 Tue, 09 Apr 2019 04:29:01 +0000 High CVE-2019-10899

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2019-10898 – In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was ... https://nvd.nist.gov/vuln/detail/CVE-2019-10898 https://nvd.nist.gov/vuln/detail/CVE-2019-10898 Tue, 09 Apr 2019 04:29:01 +0000 High CVE-2019-10898

In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length.

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2019-10897 – In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. Th... https://nvd.nist.gov/vuln/detail/CVE-2019-10897 https://nvd.nist.gov/vuln/detail/CVE-2019-10897 Tue, 09 Apr 2019 04:29:01 +0000 High CVE-2019-10897

In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2019-10896 – In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could... https://nvd.nist.gov/vuln/detail/CVE-2019-10896 https://nvd.nist.gov/vuln/detail/CVE-2019-10896 Tue, 09 Apr 2019 04:29:01 +0000 High CVE-2019-10896

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

CVSS: 7.5 · CWE: CWE-787

View on NVD

]]> [High] CVE-2019-10895 – In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file pars... https://nvd.nist.gov/vuln/detail/CVE-2019-10895 https://nvd.nist.gov/vuln/detail/CVE-2019-10895 Tue, 09 Apr 2019 04:29:01 +0000 High CVE-2019-10895

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2019-10894 – In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector c... https://nvd.nist.gov/vuln/detail/CVE-2019-10894 https://nvd.nist.gov/vuln/detail/CVE-2019-10894 Tue, 09 Apr 2019 04:29:00 +0000 High CVE-2019-10894

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called.

CVSS: 7.5 · CWE: CWE-617

View on NVD

]]> [High] CVE-2019-9214 – In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash... https://nvd.nist.gov/vuln/detail/CVE-2019-9214 https://nvd.nist.gov/vuln/detail/CVE-2019-9214 Thu, 28 Feb 2019 04:29:00 +0000 High CVE-2019-9214

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2019-9208 – In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash... https://nvd.nist.gov/vuln/detail/CVE-2019-9208 https://nvd.nist.gov/vuln/detail/CVE-2019-9208 Thu, 28 Feb 2019 04:29:00 +0000 High CVE-2019-9208

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2018-19628 – In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addr... https://nvd.nist.gov/vuln/detail/CVE-2018-19628 https://nvd.nist.gov/vuln/detail/CVE-2018-19628 Thu, 29 Nov 2018 04:29:00 +0000 High CVE-2018-19628

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error.

CVSS: 7.5 · CWE: CWE-369

View on NVD

]]> [High] CVE-2018-19627 – In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser coul... https://nvd.nist.gov/vuln/detail/CVE-2018-19627 https://nvd.nist.gov/vuln/detail/CVE-2018-19627 Thu, 29 Nov 2018 04:29:00 +0000 High CVE-2018-19627

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2018-19623 – In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could cras... https://nvd.nist.gov/vuln/detail/CVE-2018-19623 https://nvd.nist.gov/vuln/detail/CVE-2018-19623 Thu, 29 Nov 2018 04:29:00 +0000 High CVE-2018-19623

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values.

CVSS: 7.5 · CWE: CWE-787

View on NVD

]]> [High] CVE-2018-19622 – In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go int... https://nvd.nist.gov/vuln/detail/CVE-2018-19622 https://nvd.nist.gov/vuln/detail/CVE-2018-19622 Thu, 29 Nov 2018 04:29:00 +0000 High CVE-2018-19622

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows.

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2018-18227 – In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector co... https://nvd.nist.gov/vuln/detail/CVE-2018-18227 https://nvd.nist.gov/vuln/detail/CVE-2018-18227 Fri, 12 Oct 2018 06:29:01 +0000 High CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2018-18226 – In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume sys... https://nvd.nist.gov/vuln/detail/CVE-2018-18226 https://nvd.nist.gov/vuln/detail/CVE-2018-18226 Fri, 12 Oct 2018 06:29:01 +0000 High CVE-2018-18226

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.

CVSS: 7.5 · CWE: CWE-772

View on NVD

]]> [High] CVE-2018-18225 – In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed ... https://nvd.nist.gov/vuln/detail/CVE-2018-18225 https://nvd.nist.gov/vuln/detail/CVE-2018-18225 Fri, 12 Oct 2018 06:29:00 +0000 High CVE-2018-18225

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.

CVSS: 7.5 · CWE: CWE-682

View on NVD

]]> [High] CVE-2018-16058 – In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth ... https://nvd.nist.gov/vuln/detail/CVE-2018-16058 https://nvd.nist.gov/vuln/detail/CVE-2018-16058 Thu, 30 Aug 2018 01:29:00 +0000 High CVE-2018-16058

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure.

CVSS: 7.5 · CWE: CWE-665

View on NVD

]]> [High] CVE-2018-16057 – In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap d... https://nvd.nist.gov/vuln/detail/CVE-2018-16057 https://nvd.nist.gov/vuln/detail/CVE-2018-16057 Thu, 30 Aug 2018 01:29:00 +0000 High CVE-2018-16057

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2018-16056 – In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth ... https://nvd.nist.gov/vuln/detail/CVE-2018-16056 https://nvd.nist.gov/vuln/detail/CVE-2018-16056 Thu, 30 Aug 2018 01:29:00 +0000 High CVE-2018-16056

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2018-14438 – In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file... https://nvd.nist.gov/vuln/detail/CVE-2018-14438 https://nvd.nist.gov/vuln/detail/CVE-2018-14438 Fri, 20 Jul 2018 00:29:00 +0000 High CVE-2018-14438

In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2018-14370 – In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissect... https://nvd.nist.gov/vuln/detail/CVE-2018-14370 https://nvd.nist.gov/vuln/detail/CVE-2018-14370 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14370

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2018-14369 – In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 diss... https://nvd.nist.gov/vuln/detail/CVE-2018-14369 https://nvd.nist.gov/vuln/detail/CVE-2018-14369 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14369

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2018-14368 – In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar pro... https://nvd.nist.gov/vuln/detail/CVE-2018-14368 https://nvd.nist.gov/vuln/detail/CVE-2018-14368 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14368

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

CVSS: 7.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2018-14367 – In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector coul... https://nvd.nist.gov/vuln/detail/CVE-2018-14367 https://nvd.nist.gov/vuln/detail/CVE-2018-14367 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14367

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.

CVSS: 7.5 · CWE: CWE-252

View on NVD

]]> [High] CVE-2018-14344 – In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP disse... https://nvd.nist.gov/vuln/detail/CVE-2018-14344 https://nvd.nist.gov/vuln/detail/CVE-2018-14344 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14344

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2018-14343 – In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER ... https://nvd.nist.gov/vuln/detail/CVE-2018-14343 https://nvd.nist.gov/vuln/detail/CVE-2018-14343 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14343

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer.

CVSS: 7.5 · CWE: CWE-190

View on NVD

]]> [High] CVE-2018-14342 – In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protoc... https://nvd.nist.gov/vuln/detail/CVE-2018-14342 https://nvd.nist.gov/vuln/detail/CVE-2018-14342 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14342

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.

CVSS: 7.5 · CWE: CWE-834

View on NVD

]]> [High] CVE-2018-14341 – In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM diss... https://nvd.nist.gov/vuln/detail/CVE-2018-14341 https://nvd.nist.gov/vuln/detail/CVE-2018-14341 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14341

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow.

CVSS: 7.5 · CWE: CWE-190

View on NVD

]]> [High] CVE-2018-14340 – In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors tha... https://nvd.nist.gov/vuln/detail/CVE-2018-14340 https://nvd.nist.gov/vuln/detail/CVE-2018-14340 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14340

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2018-14339 – In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE disse... https://nvd.nist.gov/vuln/detail/CVE-2018-14339 https://nvd.nist.gov/vuln/detail/CVE-2018-14339 Thu, 19 Jul 2018 02:29:00 +0000 High CVE-2018-14339

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2018-11362 – In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector coul... https://nvd.nist.gov/vuln/detail/CVE-2018-11362 https://nvd.nist.gov/vuln/detail/CVE-2018-11362 Tue, 22 May 2018 21:29:00 +0000 High CVE-2018-11362

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2018-11361 – In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was add... https://nvd.nist.gov/vuln/detail/CVE-2018-11361 https://nvd.nist.gov/vuln/detail/CVE-2018-11361 Tue, 22 May 2018 21:29:00 +0000 High CVE-2018-11361

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2018-11360 – In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissecto... https://nvd.nist.gov/vuln/detail/CVE-2018-11360 https://nvd.nist.gov/vuln/detail/CVE-2018-11360 Tue, 22 May 2018 21:29:00 +0000 High CVE-2018-11360

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2018-11359 – In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and o... https://nvd.nist.gov/vuln/detail/CVE-2018-11359 https://nvd.nist.gov/vuln/detail/CVE-2018-11359 Tue, 22 May 2018 21:29:00 +0000 High CVE-2018-11359

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2018-11358 – In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector cou... https://nvd.nist.gov/vuln/detail/CVE-2018-11358 https://nvd.nist.gov/vuln/detail/CVE-2018-11358 Tue, 22 May 2018 21:29:00 +0000 High CVE-2018-11358

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2018-11357 – In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and o... https://nvd.nist.gov/vuln/detail/CVE-2018-11357 https://nvd.nist.gov/vuln/detail/CVE-2018-11357 Tue, 22 May 2018 21:29:00 +0000 High CVE-2018-11357

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2018-11356 – In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could... https://nvd.nist.gov/vuln/detail/CVE-2018-11356 https://nvd.nist.gov/vuln/detail/CVE-2018-11356 Tue, 22 May 2018 21:29:00 +0000 High CVE-2018-11356

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2018-11355 – In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/d... https://nvd.nist.gov/vuln/detail/CVE-2018-11355 https://nvd.nist.gov/vuln/detail/CVE-2018-11355 Tue, 22 May 2018 21:29:00 +0000 High CVE-2018-11355

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2018-11354 – In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed i... https://nvd.nist.gov/vuln/detail/CVE-2018-11354 https://nvd.nist.gov/vuln/detail/CVE-2018-11354 Tue, 22 May 2018 21:29:00 +0000 High CVE-2018-11354

In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]>