Lucene search
+L

7761 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/12 12:00 a.m.•4 views

CVE-2023-1994: Uncontrolled Resource Consumption

GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file...

6.5CVSS7AI score0.01001EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/04/12 12:00 a.m.•16 views

PT-2023-3430 · Wireshark +4 · Wireshark +4

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.6.0 through 3.6.12 Wireshark versions 4.0.0 through 4.0.4 Description: The issue is related to a large loop in the LISP dissector of Wireshark, which can lead to a denial of service via packet injection or crafted capture...

9.8CVSS6.3AI score0.0462EPSS
SaveExploits35References187
osv_oesa
osv_oesa
•added 2023/03/31 11:05 a.m.•6 views

OESA-2023-1190 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging fr...

7.1CVSS6.8AI score0.00649EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2023/03/31 11:05 a.m.•8 views

OESA-2023-1189 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging fr...

7.1CVSS6.8AI score0.00649EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2023/03/28 6:45 p.m.•18 views

wireshark:fuzzshark_ip_proto-udp: Stack-buffer-overflow in ext11_work_out_bundles

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4940571063222272 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux...

5.9AI score
SaveExploits0
Amazon
Amazon
•added 2023/03/22 12:00 a.m.•22 views

Important: wireshark

Issue Overview: Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file CVE-2022-4344 Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and...

7.1CVSS6.4AI score0.00887EPSS
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2023/03/13 8:38 a.m.•18 views

wireshark:fuzzshark_ip: Crash in dissect_oran_c_section

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5338133983264768 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

5.9AI score
SaveExploits0
Veracode
Veracode
•added 2023/03/12 3:13 p.m.•31 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists due to the memory leak in the NFS dissector, which allows an attacker to cause an application crash through the packet injection or crafted capture file...

6.5CVSS6.6AI score0.0085EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2023/03/12 3:12 p.m.•36 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists in the GNW dissector, which allows an attacker to cause an application crash through the packet injection or crafted capture file...

6.5CVSS6.5AI score0.0085EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2023/03/12 3:10 p.m.•29 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. An attacker can cause a iSCSI dissector crash, via packet injection or crafted capture file...

6.5CVSS6.7AI score0.00857EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2023/03/12 3:10 p.m.•32 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exits in the EAP dissector in the library, which allows an attacker to crash the application via packet injection or crafted capture file...

6.5CVSS3.3AI score0.00809EPSS
SaveExploits0References4Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2023/03/11 5:56 p.m.•37 views

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_gsmrlp

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5370835360940032 Project: wireshark Fuzzing Engine: honggfuzz Fuzz Target: fuzzsharkipproto-udp Job Type: honggfuzzasanwireshark Platform Id: linux...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2023/03/08 11:10 p.m.•10 views

wireshark:fuzzshark_ip_proto-udp: Index-out-of-bounds in dissect_oran_c_section

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6346053000757248 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerubsanwireshark Platform Id: linux...

5.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•30 views

Debian: Security Advisory (DLA-1226-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.16655EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•30 views

Debian: Security Advisory (DLA-38-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.6AI score0.03641EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/03/07 12:00 a.m.•13 views

PT-2023-35684 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state involves several functions: dissect oran c section, dissect oran, and call dissector work...

6.9AI score
SaveExploits0References2
NVD
NVD
•added 2023/03/06 9:15 p.m.•28 views

CVE-2023-1161

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file...

7.1CVSS6.7AI score0.00649EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2023/03/06 9:15 p.m.•15 views

UBUNTU-CVE-2023-1161

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file...

7.1CVSS6.8AI score0.00649EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/06 12:00 a.m.•4 views

CVE-2023-1161: Buffer Copy without Checking Size of Input

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file...

7.1CVSS6.8AI score0.00649EPSS
SaveExploits0References2
Mend
Mend
•added 2023/03/06 12:00 a.m.•4 views

CVE-2023-1161

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file...

7.1CVSS0.00649EPSS
SaveExploits0References11
Rows per page
Query Builder