Lucene search
K

20 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/06 12:0 a.m.2 views

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2026-1450)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1450 advisory. MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service CVE-2025-11626 Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial...

7.8CVSS6.2AI score0.00059EPSS
Exploits5References22
RedhatCVE
RedhatCVE
added 2025/11/27 6:23 a.m.3 views

CVE-2025-13674

A flaw in the BPv7 Bundle Protocol v7 dissector in Wireshark 4.6.0 can cause the application to crash when processing certain malformed packets or trace files. The bug was discovered during internal fuzzing and occurs due to a use-after-free memory error triggered while decoding BPv7 elements...

5.5CVSS6.6AI score0.00013EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/10/29 12:0 a.m.4 views

Wireshark 4.4.x < 4.4.9 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.9 advisory. - SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service CVE-2025-9817 - Column handlin...

7.8CVSS6.9AI score0.00176EPSS
Exploits4References22
Tenable Nessus
Tenable Nessus
added 2025/10/29 12:0 a.m.2 views

Wireshark 4.4.x < 4.4.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.9 advisory. - SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service CVE-2025-9817 - Column handling crashes...

7.8CVSS6.9AI score0.00176EPSS
Exploits4References22
NVD
NVD
added 2025/10/07 8:15 p.m.1 views

CVE-2025-61910

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS0.00075EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 7:31 p.m.2 views

EUVD-2025-32887

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS6.5AI score0.00075EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/07 7:31 p.m.1 views

CVE-2025-61910 NASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-Service

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS6.7AI score0.00075EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/07 12:0 a.m.2 views

PT-2025-41176

Name of the Vulnerable Software and Affected Versions NASA’s Interplanetary Overlay Network ION version 4.1.3 Description A specially crafted BPv7 bundle with a malformed extension block can lead to a Denial-of-Service DoS condition in ION-DTN. The issue stems from uncontrolled memory allocation...

7.5CVSS6.6AI score0.00075EPSS
Exploits0References5
Redos
Redos
added 2025/08/26 12:0 a.m.4 views

ROS-20250826-04

Vulnerability of Wireshark computer network traffic analyzer related to insufficient validation of user data in the column utility module of the Dissection engine. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in the CBOR...

7.8CVSS7.1AI score0.00138EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2025/06/16 4:26 p.m.1 views

wireshark: Uncontrolled Recursion in Wireshark

A flaw was found in Wireshark. Bundle Protocol and CBOR dissector crashes in Wireshark allow denial of service via packet injection or crafted capture file...

7.8CVSS5.7AI score0.0005EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/03/01 12:0 a.m.14 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wireshark (SUSE-SU-2025:0754-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0754-1 advisory. Update to version 4.2.11: - CVE-2025-1492: uncontrolled recursion leading to a stack buffer overflow can...

7.8CVSS6AI score0.0005EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2025/02/28 4:31 p.m.0 views

Security update for wireshark

This update for wireshark fixes the following issues: Update to version 4.2.11: CVE-2025-1492: uncontrolled recursion leading to a stack buffer overflow can cause Bundle Protocol and CBOR dissector to crash bsc1237414. Patch Instructions: To install this SUSE update use the SUSE recommended...

7.8CVSS7.4AI score0.0005EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/02/20 2:30 p.m.1 views

SUSE CVE-2025-1492

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.2AI score0.0005EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2025/02/20 2:15 a.m.1 views

CVE-2025-1492

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.1AI score0.0005EPSS
Exploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2025/02/20 2:15 a.m.1 views

CVE-2025-1492

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.6AI score0.0005EPSS
Exploits0References2
OSV
OSV
added 2025/02/20 2:15 a.m.1 views

DEBIAN-CVE-2025-1492

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file...

7.5CVSS5.6AI score0.0005EPSS
Exploits0References1
OSV
OSV
added 2025/02/20 2:15 a.m.0 views

UBUNTU-CVE-2025-1492

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file...

7.8CVSS5.8AI score0.0005EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/02/20 12:0 a.m.3 views

Wireshark 安全漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from a possible crash in the...

7.8CVSS5.7AI score0.0005EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/02/19 12:0 a.m.11 views

Wireshark 4.2.x < 4.2.11 / 4.4.x < 4.4.4 DoS Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 4.2.11 or 4.4.4. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.11 advisory. - The Bundle Protocol and CBOR dissectors could crash. Fixed in master: 83c73a83ad Fixed in release-4.4:...

7.8CVSS6.1AI score0.0005EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/02/19 12:0 a.m.1 views

PT-2025-7516

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.10 Wireshark versions 4.4.0 through 4.4.3 Description The issue allows denial of service via packet injection or crafted capture file, specifically affecting the Bundle Protocol and CBOR dissector in...

7.8CVSS6.6AI score0.00176EPSS
Exploits12References66
Rows per page
Query Builder