CVE Daily – Wireshark https://cvedaily.com/pages/tags/wireshark.html CVE Daily – Wireshark en Wed, 03 Jun 2026 21:26:41 +0000 [Medium] CVE-2026-9759 – ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 al... https://nvd.nist.gov/vuln/detail/CVE-2026-9759 https://nvd.nist.gov/vuln/detail/CVE-2026-9759 Wed, 27 May 2026 20:16:46 +0000 Medium CVE-2026-9759

ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service

CVSS: 5.5 · CWE: CWE-476

View on NVD

]]> [Medium] CVE-2026-43901 – Wireshark MCP is an MCP Server that turns tshark into a structured analysis inte... https://nvd.nist.gov/vuln/detail/CVE-2026-43901 https://nvd.nist.gov/vuln/detail/CVE-2026-43901 Mon, 11 May 2026 23:20:21 +0000 Medium CVE-2026-43901

Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an attacker-controlled dest_dir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox (_allowed_dirs) is None b…

CVSS: 6.8 · CWE: CWE-22

View on NVD

]]> [High] CVE-2026-7785 – A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94... https://nvd.nist.gov/vuln/detail/CVE-2026-7785 https://nvd.nist.gov/vuln/detail/CVE-2026-7785 Tue, 05 May 2026 00:16:17 +0000 High CVE-2026-7785

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quick_capture of the file pyshark_mcp.py. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This product operates o…

CVSS: 7.3 · CWE: CWE-77

View on NVD

]]> [Medium] CVE-2026-6525 – IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 https://nvd.nist.gov/vuln/detail/CVE-2026-6525 https://nvd.nist.gov/vuln/detail/CVE-2026-6525 Sat, 02 May 2026 12:16:16 +0000 Medium CVE-2026-6525

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4

CVSS: 5.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2026-5656 – Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 al... https://nvd.nist.gov/vuln/detail/CVE-2026-5656 https://nvd.nist.gov/vuln/detail/CVE-2026-5656 Fri, 01 May 2026 00:16:25 +0000 High CVE-2026-5656

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS: 7.0 · CWE: CWE-22

View on NVD

]]> [High] CVE-2026-5405 – RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 all... https://nvd.nist.gov/vuln/detail/CVE-2026-5405 https://nvd.nist.gov/vuln/detail/CVE-2026-5405 Fri, 01 May 2026 00:16:24 +0000 High CVE-2026-5405

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS: 7.8 · CWE: CWE-122

View on NVD

]]> [Medium] CVE-2026-5404 – K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows... https://nvd.nist.gov/vuln/detail/CVE-2026-5404 https://nvd.nist.gov/vuln/detail/CVE-2026-5404 Fri, 01 May 2026 00:16:24 +0000 Medium CVE-2026-5404

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 4.7 · CWE: CWE-120

View on NVD

]]> [High] CVE-2026-5403 – SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of... https://nvd.nist.gov/vuln/detail/CVE-2026-5403 https://nvd.nist.gov/vuln/detail/CVE-2026-5403 Fri, 01 May 2026 00:16:24 +0000 High CVE-2026-5403

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS: 7.8 · CWE: CWE-122

View on NVD

]]> [Medium] CVE-2026-6870 – GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 ... https://nvd.nist.gov/vuln/detail/CVE-2026-6870 https://nvd.nist.gov/vuln/detail/CVE-2026-6870 Thu, 30 Apr 2026 07:16:41 +0000 Medium CVE-2026-6870

GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-824

View on NVD

]]> [Medium] CVE-2026-6869 – WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4... https://nvd.nist.gov/vuln/detail/CVE-2026-6869 https://nvd.nist.gov/vuln/detail/CVE-2026-6869 Thu, 30 Apr 2026 07:16:41 +0000 Medium CVE-2026-6869

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-1325

View on NVD

]]> [Medium] CVE-2026-6867 – SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 al... https://nvd.nist.gov/vuln/detail/CVE-2026-6867 https://nvd.nist.gov/vuln/detail/CVE-2026-6867 Thu, 30 Apr 2026 07:16:41 +0000 Medium CVE-2026-6867

SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-1325

View on NVD

]]> [Medium] CVE-2026-6538 – BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 al... https://nvd.nist.gov/vuln/detail/CVE-2026-6538 https://nvd.nist.gov/vuln/detail/CVE-2026-6538 Thu, 30 Apr 2026 07:16:41 +0000 Medium CVE-2026-6538

BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-121

View on NVD

]]> [Medium] CVE-2026-6537 – ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 ... https://nvd.nist.gov/vuln/detail/CVE-2026-6537 https://nvd.nist.gov/vuln/detail/CVE-2026-6537 Thu, 30 Apr 2026 07:16:41 +0000 Medium CVE-2026-6537

ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-121

View on NVD

]]> [Medium] CVE-2026-6536 – DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 https://nvd.nist.gov/vuln/detail/CVE-2026-6536 https://nvd.nist.gov/vuln/detail/CVE-2026-6536 Thu, 30 Apr 2026 07:16:40 +0000 Medium CVE-2026-6536

DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-6535 – Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0... https://nvd.nist.gov/vuln/detail/CVE-2026-6535 https://nvd.nist.gov/vuln/detail/CVE-2026-6535 Thu, 30 Apr 2026 07:16:40 +0000 Medium CVE-2026-6535

Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-1325

View on NVD

]]> [Medium] CVE-2026-6534 – USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 t... https://nvd.nist.gov/vuln/detail/CVE-2026-6534 https://nvd.nist.gov/vuln/detail/CVE-2026-6534 Thu, 30 Apr 2026 07:16:40 +0000 Medium CVE-2026-6534

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-6533 – Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0... https://nvd.nist.gov/vuln/detail/CVE-2026-6533 https://nvd.nist.gov/vuln/detail/CVE-2026-6533 Thu, 30 Apr 2026 07:16:40 +0000 Medium CVE-2026-6533

Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-1325

View on NVD

]]> [Medium] CVE-2026-6532 – Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 ... https://nvd.nist.gov/vuln/detail/CVE-2026-6532 https://nvd.nist.gov/vuln/detail/CVE-2026-6532 Thu, 30 Apr 2026 07:16:40 +0000 Medium CVE-2026-6532

Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-126

View on NVD

]]> [Medium] CVE-2026-6531 – SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4... https://nvd.nist.gov/vuln/detail/CVE-2026-6531 https://nvd.nist.gov/vuln/detail/CVE-2026-6531 Thu, 30 Apr 2026 07:16:40 +0000 Medium CVE-2026-6531

SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-6530 – DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.1... https://nvd.nist.gov/vuln/detail/CVE-2026-6530 https://nvd.nist.gov/vuln/detail/CVE-2026-6530 Thu, 30 Apr 2026 07:16:40 +0000 Medium CVE-2026-6530

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-122

View on NVD

]]> [Medium] CVE-2026-6529 – iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows de... https://nvd.nist.gov/vuln/detail/CVE-2026-6529 https://nvd.nist.gov/vuln/detail/CVE-2026-6529 Thu, 30 Apr 2026 07:16:40 +0000 Medium CVE-2026-6529

iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-122

View on NVD

]]> [Medium] CVE-2026-6528 – TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial o... https://nvd.nist.gov/vuln/detail/CVE-2026-6528 https://nvd.nist.gov/vuln/detail/CVE-2026-6528 Thu, 30 Apr 2026 07:16:40 +0000 Medium CVE-2026-6528

TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-6527 – ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4... https://nvd.nist.gov/vuln/detail/CVE-2026-6527 https://nvd.nist.gov/vuln/detail/CVE-2026-6527 Thu, 30 Apr 2026 07:16:39 +0000 Medium CVE-2026-6527

ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-674

View on NVD

]]> [Medium] CVE-2026-6526 – RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 https://nvd.nist.gov/vuln/detail/CVE-2026-6526 https://nvd.nist.gov/vuln/detail/CVE-2026-6526 Thu, 30 Apr 2026 07:16:39 +0000 Medium CVE-2026-6526

RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4

CVSS: 5.5 · CWE: CWE-476

View on NVD

]]> [Medium] CVE-2026-6524 – MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 a... https://nvd.nist.gov/vuln/detail/CVE-2026-6524 https://nvd.nist.gov/vuln/detail/CVE-2026-6524 Thu, 30 Apr 2026 07:16:39 +0000 Medium CVE-2026-6524

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-824

View on NVD

]]> [Medium] CVE-2026-6523 – GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4... https://nvd.nist.gov/vuln/detail/CVE-2026-6523 https://nvd.nist.gov/vuln/detail/CVE-2026-6523 Thu, 30 Apr 2026 07:16:39 +0000 Medium CVE-2026-6523

GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-6522 – RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4... https://nvd.nist.gov/vuln/detail/CVE-2026-6522 https://nvd.nist.gov/vuln/detail/CVE-2026-6522 Thu, 30 Apr 2026 07:16:39 +0000 Medium CVE-2026-6522

RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-6521 – OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4... https://nvd.nist.gov/vuln/detail/CVE-2026-6521 https://nvd.nist.gov/vuln/detail/CVE-2026-6521 Thu, 30 Apr 2026 07:16:39 +0000 Medium CVE-2026-6521

OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-6520 – OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4... https://nvd.nist.gov/vuln/detail/CVE-2026-6520 https://nvd.nist.gov/vuln/detail/CVE-2026-6520 Thu, 30 Apr 2026 07:16:39 +0000 Medium CVE-2026-6520

OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-6519 – MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4... https://nvd.nist.gov/vuln/detail/CVE-2026-6519 https://nvd.nist.gov/vuln/detail/CVE-2026-6519 Thu, 30 Apr 2026 07:16:39 +0000 Medium CVE-2026-6519

MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-5657 – iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial o... https://nvd.nist.gov/vuln/detail/CVE-2026-5657 https://nvd.nist.gov/vuln/detail/CVE-2026-5657 Thu, 30 Apr 2026 07:16:38 +0000 Medium CVE-2026-5657

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-415

View on NVD

]]> [Medium] CVE-2026-5655 – SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of servic... https://nvd.nist.gov/vuln/detail/CVE-2026-5655 https://nvd.nist.gov/vuln/detail/CVE-2026-5655 Thu, 30 Apr 2026 07:16:38 +0000 Medium CVE-2026-5655

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

CVSS: 5.5 · CWE: CWE-416

View on NVD

]]> [Medium] CVE-2026-5654 – AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial... https://nvd.nist.gov/vuln/detail/CVE-2026-5654 https://nvd.nist.gov/vuln/detail/CVE-2026-5654 Thu, 30 Apr 2026 07:16:38 +0000 Medium CVE-2026-5654

AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-121

View on NVD

]]> [Medium] CVE-2026-5653 – DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.1... https://nvd.nist.gov/vuln/detail/CVE-2026-5653 https://nvd.nist.gov/vuln/detail/CVE-2026-5653 Thu, 30 Apr 2026 07:16:38 +0000 Medium CVE-2026-5653

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-122

View on NVD

]]> [Medium] CVE-2026-5409 – Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 ... https://nvd.nist.gov/vuln/detail/CVE-2026-5409 https://nvd.nist.gov/vuln/detail/CVE-2026-5409 Thu, 30 Apr 2026 07:16:38 +0000 Medium CVE-2026-5409

Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-674

View on NVD

]]> [Medium] CVE-2026-5408 – BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 ... https://nvd.nist.gov/vuln/detail/CVE-2026-5408 https://nvd.nist.gov/vuln/detail/CVE-2026-5408 Thu, 30 Apr 2026 07:16:38 +0000 Medium CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-674

View on NVD

]]> [Medium] CVE-2026-5407 – SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4... https://nvd.nist.gov/vuln/detail/CVE-2026-5407 https://nvd.nist.gov/vuln/detail/CVE-2026-5407 Thu, 30 Apr 2026 07:16:38 +0000 Medium CVE-2026-5407

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-5406 – FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.1... https://nvd.nist.gov/vuln/detail/CVE-2026-5406 https://nvd.nist.gov/vuln/detail/CVE-2026-5406 Thu, 30 Apr 2026 07:16:37 +0000 Medium CVE-2026-5406

FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-674

View on NVD

]]> [High] CVE-2026-5402 – TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial o... https://nvd.nist.gov/vuln/detail/CVE-2026-5402 https://nvd.nist.gov/vuln/detail/CVE-2026-5402 Thu, 30 Apr 2026 07:16:37 +0000 High CVE-2026-5402

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [Medium] CVE-2026-5401 – AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to ... https://nvd.nist.gov/vuln/detail/CVE-2026-5401 https://nvd.nist.gov/vuln/detail/CVE-2026-5401 Thu, 30 Apr 2026 07:16:37 +0000 Medium CVE-2026-5401

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-674

View on NVD

]]> [Medium] CVE-2026-5299 – ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4... https://nvd.nist.gov/vuln/detail/CVE-2026-5299 https://nvd.nist.gov/vuln/detail/CVE-2026-5299 Thu, 30 Apr 2026 07:16:37 +0000 Medium CVE-2026-5299

ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-674

View on NVD

]]> [Medium] CVE-2026-7375 – UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4... https://nvd.nist.gov/vuln/detail/CVE-2026-7375 https://nvd.nist.gov/vuln/detail/CVE-2026-7375 Thu, 30 Apr 2026 06:16:16 +0000 Medium CVE-2026-7375

UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-6868 – HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 al... https://nvd.nist.gov/vuln/detail/CVE-2026-6868 https://nvd.nist.gov/vuln/detail/CVE-2026-6868 Thu, 30 Apr 2026 06:16:16 +0000 Medium CVE-2026-6868

HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS: 5.5 · CWE: CWE-121

View on NVD

]]> [Critical] CVE-2026-24060 – Service information is not encrypted when transmitted as BACnet packets over th... https://nvd.nist.gov/vuln/detail/CVE-2026-24060 https://nvd.nist.gov/vuln/detail/CVE-2026-24060 Sat, 21 Mar 2026 00:16:25 +0000 Critical CVE-2026-24060

Service information is not encrypted when transmitted as BACnet packets over the wire, and can be sniffed, intercepted, and modified by an attacker. Valuable information such as the File Start Position and File Data can be sniffed from network traffic using Wireshark's BACnet dissector filter. The proprietary format used by WebCTRL to receive updates from the PLC can also be sniffed and reve…

CVSS: 9.1 · CWE: CWE-319

View on NVD

]]> [Medium] CVE-2026-3203 – RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to ... https://nvd.nist.gov/vuln/detail/CVE-2026-3203 https://nvd.nist.gov/vuln/detail/CVE-2026-3203 Wed, 25 Feb 2026 15:20:55 +0000 Medium CVE-2026-3203

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

CVSS: 5.5 · CWE: CWE-126

View on NVD

]]> [Medium] CVE-2026-3202 – NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of ser... https://nvd.nist.gov/vuln/detail/CVE-2026-3202 https://nvd.nist.gov/vuln/detail/CVE-2026-3202 Wed, 25 Feb 2026 15:20:55 +0000 Medium CVE-2026-3202

NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service

CVSS: 4.7 · CWE: CWE-476

View on NVD

]]> [Medium] CVE-2026-3201 – USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4... https://nvd.nist.gov/vuln/detail/CVE-2026-3201 https://nvd.nist.gov/vuln/detail/CVE-2026-3201 Wed, 25 Feb 2026 15:20:55 +0000 Medium CVE-2026-3201

USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

CVSS: 4.7 · CWE: CWE-1325

View on NVD

]]> [Medium] CVE-2026-0962 – SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4... https://nvd.nist.gov/vuln/detail/CVE-2026-0962 https://nvd.nist.gov/vuln/detail/CVE-2026-0962 Wed, 14 Jan 2026 21:15:53 +0000 Medium CVE-2026-0962

SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

CVSS: 5.3 · CWE: CWE-787

View on NVD

]]> [Medium] CVE-2026-0961 – BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows den... https://nvd.nist.gov/vuln/detail/CVE-2026-0961 https://nvd.nist.gov/vuln/detail/CVE-2026-0961 Wed, 14 Jan 2026 21:15:53 +0000 Medium CVE-2026-0961

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

CVSS: 5.5 · CWE: CWE-787

View on NVD

]]> [Medium] CVE-2026-0960 – HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial... https://nvd.nist.gov/vuln/detail/CVE-2026-0960 https://nvd.nist.gov/vuln/detail/CVE-2026-0960 Wed, 14 Jan 2026 21:15:52 +0000 Medium CVE-2026-0960

HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service

CVSS: 4.7 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2026-0959 – IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4... https://nvd.nist.gov/vuln/detail/CVE-2026-0959 https://nvd.nist.gov/vuln/detail/CVE-2026-0959 Wed, 14 Jan 2026 21:15:52 +0000 Medium CVE-2026-0959

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

CVSS: 5.3 · CWE: CWE-787

View on NVD

]]> [Medium] CVE-2025-13946 – MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 a... https://nvd.nist.gov/vuln/detail/CVE-2025-13946 https://nvd.nist.gov/vuln/detail/CVE-2025-13946 Wed, 03 Dec 2025 08:15:48 +0000 Medium CVE-2025-13946

MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2025-13945 – HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service https://nvd.nist.gov/vuln/detail/CVE-2025-13945 https://nvd.nist.gov/vuln/detail/CVE-2025-13945 Wed, 03 Dec 2025 08:15:47 +0000 Medium CVE-2025-13945

HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service

CVSS: 5.5 · CWE: CWE-1325

View on NVD

]]> [Medium] CVE-2025-13674 – BPv7 dissector crash in Wireshark 4.6.0 allows denial of service https://nvd.nist.gov/vuln/detail/CVE-2025-13674 https://nvd.nist.gov/vuln/detail/CVE-2025-13674 Wed, 26 Nov 2025 12:15:46 +0000 Medium CVE-2025-13674

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service

CVSS: 5.5 · CWE: CWE-824

View on NVD

]]> [High] CVE-2025-13499 – Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of se... https://nvd.nist.gov/vuln/detail/CVE-2025-13499 https://nvd.nist.gov/vuln/detail/CVE-2025-13499 Fri, 21 Nov 2025 06:15:48 +0000 High CVE-2025-13499

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service

CVSS: 7.8 · CWE: CWE-824

View on NVD

]]> [Medium] CVE-2025-11626 – MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 al... https://nvd.nist.gov/vuln/detail/CVE-2025-11626 https://nvd.nist.gov/vuln/detail/CVE-2025-11626 Fri, 10 Oct 2025 23:15:35 +0000 Medium CVE-2025-11626

MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service

CVSS: 5.5 · CWE: CWE-835

View on NVD

]]> [High] CVE-2025-9817 – SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service https://nvd.nist.gov/vuln/detail/CVE-2025-9817 https://nvd.nist.gov/vuln/detail/CVE-2025-9817 Wed, 03 Sep 2025 08:15:31 +0000 High CVE-2025-9817

SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service

CVSS: 7.8 · CWE: CWE-476

View on NVD

]]> [High] CVE-2025-5601 – Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows d... https://nvd.nist.gov/vuln/detail/CVE-2025-5601 https://nvd.nist.gov/vuln/detail/CVE-2025-5601 Wed, 04 Jun 2025 11:15:22 +0000 High CVE-2025-5601

Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-120

View on NVD

]]> [High] CVE-2025-1492 – Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0... https://nvd.nist.gov/vuln/detail/CVE-2025-1492 https://nvd.nist.gov/vuln/detail/CVE-2025-1492 Thu, 20 Feb 2025 02:15:38 +0000 High CVE-2025-1492

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-674

View on NVD

]]> [High] CVE-2024-11596 – ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denia... https://nvd.nist.gov/vuln/detail/CVE-2024-11596 https://nvd.nist.gov/vuln/detail/CVE-2024-11596 Thu, 21 Nov 2024 11:15:33 +0000 High CVE-2024-11596

ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-126

View on NVD

]]> [High] CVE-2024-11595 – FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2... https://nvd.nist.gov/vuln/detail/CVE-2024-11595 https://nvd.nist.gov/vuln/detail/CVE-2024-11595 Thu, 21 Nov 2024 11:15:32 +0000 High CVE-2024-11595

FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-835

View on NVD

]]> [High] CVE-2024-9781 – AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2... https://nvd.nist.gov/vuln/detail/CVE-2024-9781 https://nvd.nist.gov/vuln/detail/CVE-2024-9781 Thu, 10 Oct 2024 07:15:04 +0000 High CVE-2024-9781

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-230

View on NVD

]]> [High] CVE-2024-9780 – ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injec... https://nvd.nist.gov/vuln/detail/CVE-2024-9780 https://nvd.nist.gov/vuln/detail/CVE-2024-9780 Thu, 10 Oct 2024 07:15:03 +0000 High CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-456

View on NVD

]]> [Medium] CVE-2024-8645 – SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows deni... https://nvd.nist.gov/vuln/detail/CVE-2024-8645 https://nvd.nist.gov/vuln/detail/CVE-2024-8645 Tue, 10 Sep 2024 10:15:14 +0000 Medium CVE-2024-8645

SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file

CVSS: 5.5 · CWE: CWE-824

View on NVD

]]> [High] CVE-2024-8250 – NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows d... https://nvd.nist.gov/vuln/detail/CVE-2024-8250 https://nvd.nist.gov/vuln/detail/CVE-2024-8250 Thu, 29 Aug 2024 00:15:09 +0000 High CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-825

View on NVD

]]> [Medium] CVE-2024-4854 – MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0... https://nvd.nist.gov/vuln/detail/CVE-2024-4854 https://nvd.nist.gov/vuln/detail/CVE-2024-4854 Tue, 14 May 2024 15:45:18 +0000 Medium CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

CVSS: 6.4 · CWE: CWE-835

View on NVD

]]> [High] CVE-2024-2955 – T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows deni... https://nvd.nist.gov/vuln/detail/CVE-2024-2955 https://nvd.nist.gov/vuln/detail/CVE-2024-2955 Tue, 26 Mar 2024 20:15:11 +0000 High CVE-2024-2955

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-762

View on NVD

]]> [High] CVE-2023-6175 – NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 all... https://nvd.nist.gov/vuln/detail/CVE-2023-6175 https://nvd.nist.gov/vuln/detail/CVE-2023-6175 Tue, 26 Mar 2024 08:15:35 +0000 High CVE-2023-6175

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file

CVSS: 7.8 · CWE: CWE-120

View on NVD

]]> [High] CVE-2024-24479 – A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a ... https://nvd.nist.gov/vuln/detail/CVE-2024-24479 https://nvd.nist.gov/vuln/detail/CVE-2024-24479 Wed, 21 Feb 2024 19:15:09 +0000 High CVE-2024-24479

A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

CVSS: 7.5 · CWE: CWE-120

View on NVD

]]> [High] CVE-2024-24476 – A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a ... https://nvd.nist.gov/vuln/detail/CVE-2024-24476 https://nvd.nist.gov/vuln/detail/CVE-2024-24476 Wed, 21 Feb 2024 19:15:09 +0000 High CVE-2024-24476

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2024-24478 – An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of... https://nvd.nist.gov/vuln/detail/CVE-2024-24478 https://nvd.nist.gov/vuln/detail/CVE-2024-24478 Wed, 21 Feb 2024 17:15:09 +0000 High CVE-2024-24478

An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

CVSS: 7.5 · CWE: CWE-680

View on NVD

]]> [High] CVE-2024-0211 – DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet in... https://nvd.nist.gov/vuln/detail/CVE-2024-0211 https://nvd.nist.gov/vuln/detail/CVE-2024-0211 Wed, 03 Jan 2024 08:15:11 +0000 High CVE-2024-0211

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-835

View on NVD

]]> [High] CVE-2024-0210 – Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packe... https://nvd.nist.gov/vuln/detail/CVE-2024-0210 https://nvd.nist.gov/vuln/detail/CVE-2024-0210 Wed, 03 Jan 2024 08:15:11 +0000 High CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-674

View on NVD

]]> [High] CVE-2024-0209 – IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3... https://nvd.nist.gov/vuln/detail/CVE-2024-0209 https://nvd.nist.gov/vuln/detail/CVE-2024-0209 Wed, 03 Jan 2024 08:15:10 +0000 High CVE-2024-0209

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-476

View on NVD

]]> [High] CVE-2024-0208 – GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 al... https://nvd.nist.gov/vuln/detail/CVE-2024-0208 https://nvd.nist.gov/vuln/detail/CVE-2024-0208 Wed, 03 Jan 2024 08:15:10 +0000 High CVE-2024-0208

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-230

View on NVD

]]> [High] CVE-2024-0207 – HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet inj... https://nvd.nist.gov/vuln/detail/CVE-2024-0207 https://nvd.nist.gov/vuln/detail/CVE-2024-0207 Wed, 03 Jan 2024 08:15:10 +0000 High CVE-2024-0207

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS: 7.8 · CWE: CWE-125

View on NVD

]]> [Medium] CVE-2023-6174 – SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via pa... https://nvd.nist.gov/vuln/detail/CVE-2023-6174 https://nvd.nist.gov/vuln/detail/CVE-2023-6174 Thu, 16 Nov 2023 12:15:07 +0000 Medium CVE-2023-6174

SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file

CVSS: 6.3 · CWE: CWE-125

View on NVD

]]> [Medium] CVE-2023-5371 – RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allow... https://nvd.nist.gov/vuln/detail/CVE-2023-5371 https://nvd.nist.gov/vuln/detail/CVE-2023-5371 Wed, 04 Oct 2023 17:15:10 +0000 Medium CVE-2023-5371

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

CVSS: 5.3 · CWE: CWE-789

View on NVD

]]> [Medium] CVE-2023-2906 – Due to a failure in validating the length provided by an attacker-crafted CP2179... https://nvd.nist.gov/vuln/detail/CVE-2023-2906 https://nvd.nist.gov/vuln/detail/CVE-2023-2906 Fri, 25 Aug 2023 21:15:07 +0000 Medium CVE-2023-2906

Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.

CVSS: 6.5 · CWE: CWE-369

View on NVD

]]> [Medium] CVE-2023-4513 – BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 all... https://nvd.nist.gov/vuln/detail/CVE-2023-4513 https://nvd.nist.gov/vuln/detail/CVE-2023-4513 Thu, 24 Aug 2023 07:15:12 +0000 Medium CVE-2023-4513

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

CVSS: 5.3 · CWE: CWE-401

View on NVD

]]> [Medium] CVE-2023-4512 – CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via pa... https://nvd.nist.gov/vuln/detail/CVE-2023-4512 https://nvd.nist.gov/vuln/detail/CVE-2023-4512 Thu, 24 Aug 2023 07:15:12 +0000 Medium CVE-2023-4512

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

CVSS: 5.3 · CWE: CWE-674

View on NVD

]]> [Medium] CVE-2023-4511 – BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 a... https://nvd.nist.gov/vuln/detail/CVE-2023-4511 https://nvd.nist.gov/vuln/detail/CVE-2023-4511 Thu, 24 Aug 2023 07:15:12 +0000 Medium CVE-2023-4511

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

CVSS: 5.3 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2023-3649 – iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via p... https://nvd.nist.gov/vuln/detail/CVE-2023-3649 https://nvd.nist.gov/vuln/detail/CVE-2023-3649 Fri, 14 Jul 2023 07:15:08 +0000 Medium CVE-2023-3649

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

CVSS: 5.3 · CWE: CWE-126

View on NVD

]]> [Medium] CVE-2023-3648 – Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows den... https://nvd.nist.gov/vuln/detail/CVE-2023-3648 https://nvd.nist.gov/vuln/detail/CVE-2023-3648 Fri, 14 Jul 2023 07:15:08 +0000 Medium CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file

CVSS: 5.3 · CWE: CWE-762

View on NVD

]]> [Medium] CVE-2023-0668 – Due to failure in validating the length provided by an attacker-crafted IEEE-C37... https://nvd.nist.gov/vuln/detail/CVE-2023-0668 https://nvd.nist.gov/vuln/detail/CVE-2023-0668 Wed, 07 Jun 2023 03:15:09 +0000 Medium CVE-2023-0668

Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

CVSS: 6.5 · CWE: CWE-125

View on NVD

]]> [Medium] CVE-2023-0667 – Due to failure in validating the length provided by an attacker-crafted MSMMS pa... https://nvd.nist.gov/vuln/detail/CVE-2023-0667 https://nvd.nist.gov/vuln/detail/CVE-2023-0667 Wed, 07 Jun 2023 03:15:09 +0000 Medium CVE-2023-0667

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

CVSS: 6.5 · CWE: CWE-122

View on NVD

]]> [Medium] CVE-2023-0666 – Due to failure in validating the length provided by an attacker-crafted RTPS pac... https://nvd.nist.gov/vuln/detail/CVE-2023-0666 https://nvd.nist.gov/vuln/detail/CVE-2023-0666 Wed, 07 Jun 2023 03:15:09 +0000 Medium CVE-2023-0666

Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

CVSS: 6.5 · CWE: CWE-122

View on NVD

]]> [Medium] CVE-2023-2952 – XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allo... https://nvd.nist.gov/vuln/detail/CVE-2023-2952 https://nvd.nist.gov/vuln/detail/CVE-2023-2952 Tue, 30 May 2023 23:15:09 +0000 Medium CVE-2023-2952

XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

CVSS: 5.3 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2023-2879 – GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denia... https://nvd.nist.gov/vuln/detail/CVE-2023-2879 https://nvd.nist.gov/vuln/detail/CVE-2023-2879 Fri, 26 May 2023 21:15:19 +0000 Medium CVE-2023-2879

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

CVSS: 6.3 · CWE: CWE-835

View on NVD

]]> [Medium] CVE-2023-2858 – NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allo... https://nvd.nist.gov/vuln/detail/CVE-2023-2858 https://nvd.nist.gov/vuln/detail/CVE-2023-2858 Fri, 26 May 2023 21:15:18 +0000 Medium CVE-2023-2858

NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS: 5.3 · CWE: CWE-787

View on NVD

]]> [Medium] CVE-2023-2857 – BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows den... https://nvd.nist.gov/vuln/detail/CVE-2023-2857 https://nvd.nist.gov/vuln/detail/CVE-2023-2857 Fri, 26 May 2023 21:15:18 +0000 Medium CVE-2023-2857

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS: 5.3 · CWE: CWE-787

View on NVD

]]> [Medium] CVE-2023-2856 – VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13... https://nvd.nist.gov/vuln/detail/CVE-2023-2856 https://nvd.nist.gov/vuln/detail/CVE-2023-2856 Fri, 26 May 2023 21:15:17 +0000 Medium CVE-2023-2856

VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS: 5.3 · CWE: CWE-787

View on NVD

]]> [Medium] CVE-2023-2855 – Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows ... https://nvd.nist.gov/vuln/detail/CVE-2023-2855 https://nvd.nist.gov/vuln/detail/CVE-2023-2855 Fri, 26 May 2023 21:15:17 +0000 Medium CVE-2023-2855

Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS: 5.3 · CWE: CWE-787

View on NVD

]]> [Medium] CVE-2023-2854 – BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows den... https://nvd.nist.gov/vuln/detail/CVE-2023-2854 https://nvd.nist.gov/vuln/detail/CVE-2023-2854 Fri, 26 May 2023 21:15:17 +0000 Medium CVE-2023-2854

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS: 5.3 · CWE: CWE-787

View on NVD

]]> [Medium] CVE-2023-1994 – GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows den... https://nvd.nist.gov/vuln/detail/CVE-2023-1994 https://nvd.nist.gov/vuln/detail/CVE-2023-1994 Wed, 12 Apr 2023 22:15:13 +0000 Medium CVE-2023-1994

GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

CVSS: 6.3 · CWE: CWE-400

View on NVD

]]> [Medium] CVE-2023-1993 – LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows... https://nvd.nist.gov/vuln/detail/CVE-2023-1993 https://nvd.nist.gov/vuln/detail/CVE-2023-1993 Wed, 12 Apr 2023 21:15:16 +0000 Medium CVE-2023-1993

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

CVSS: 6.3 · CWE: CWE-834

View on NVD

]]> [Medium] CVE-2023-1992 – RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows ... https://nvd.nist.gov/vuln/detail/CVE-2023-1992 https://nvd.nist.gov/vuln/detail/CVE-2023-1992 Wed, 12 Apr 2023 21:15:15 +0000 Medium CVE-2023-1992

RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

CVSS: 6.3 · CWE: CWE-400

View on NVD

]]> [Medium] CVE-2023-1161 – ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to... https://nvd.nist.gov/vuln/detail/CVE-2023-1161 https://nvd.nist.gov/vuln/detail/CVE-2023-1161 Mon, 06 Mar 2023 21:15:10 +0000 Medium CVE-2023-1161

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file

CVSS: 6.3 · CWE: CWE-120

View on NVD

]]> [Medium] CVE-2023-0417 – Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10... https://nvd.nist.gov/vuln/detail/CVE-2023-0417 https://nvd.nist.gov/vuln/detail/CVE-2023-0417 Thu, 26 Jan 2023 21:18:08 +0000 Medium CVE-2023-0417

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

CVSS: 6.3 · CWE: CWE-404

View on NVD

]]> [Medium] CVE-2023-0416 – GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows d... https://nvd.nist.gov/vuln/detail/CVE-2023-0416 https://nvd.nist.gov/vuln/detail/CVE-2023-0416 Thu, 26 Jan 2023 21:18:08 +0000 Medium CVE-2023-0416

GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

CVSS: 6.3 · CWE: CWE-404

View on NVD

]]>