7778 matches found
CVE-2021-22174
Wireshark CVE-2021-22174 affects Wireshark 3.4.0–3.4.2, where a crash in the USB HID dissector can cause a denial of service via crafted captures or packet injections. Remediation per connected advisories is to upgrade to a version with fixes (e.g., Wireshark 3.4.6 or later; 3.4.3–3.4.6 lines app...
CVE-2021-22174
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...
CVE-2021-22174
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...
CVE-2021-22174
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...
CVE-2021-22173: Missing Release of Memory after Effective Lifetime
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...
CVE-2021-22174: Allocation of Resources Without Limits or Throttling
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...
PT-2021-8021
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.4.0 through 3.4.2 Description The issue is related to a crash in the USB HID dissector, which can lead to a denial of service. This can be achieved via packet injection or a crafted capture file, allowing a remote attacker...
PT-2021-8020
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.4.0 through 3.4.2 Description The issue is related to a memory leak in the USB HID dissector, which can be exploited to cause a denial of service via packet injection or crafted capture files. This can allow a remote...
Kafka Protocol Dissector Disruption
The vulnerability of the Kafka Protocol Dissector component epan/dissectors/packet-kafka.c in the Wireshark traffic analyzer software is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...
[ASA-202102-3] wireshark-cli: denial of service
Arch Linux Security Advisory ASA-202102-3 ========================================= Severity: Low Date : 2021-02-06 CVE-ID : CVE-2021-22173 CVE-2021-22174 Package : wireshark-cli Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1510 Summary ======= The package...
OESA-2021-1030 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.\r\n\r\n Security Fixes:\r\n\r\n In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into ...
Wireshark 3.4.x < 3.4.3 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 3.4.3. It is, therefore, affected by vulnerabilities as referenced in the wireshark-3.4.3 advisory. - The USB HID dissector could leak memory. It may be possible to make Wireshark consume excessive CPU resources by injectin...
wireshark:fuzzshark_ip_proto-udp: Stack-use-after-return in sta_prop_equal_fn
Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4975614442471424 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux...
CVE-2021-22174
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...
CVE-2020-26418
A flaw was discovered in the Apache Kafka protocol dissector of Wireshark while decoding packets captured in a pcap file or coming from the network. A remote attacker may abuse this flaw by sending specially crafted packets that, when processed, would potentially make Wireshark crash resulting in...
Wireshark 3.4.x < 3.4.2 A Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 3.4.2. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.2 advisory. - Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted...
Wireshark 3.4.x < 3.4.2 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.4.2. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.2 advisory. - Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or...
wireshark:fuzzshark_ip_proto-udp: Heap-use-after-free in g_strdup
Detailed Report: https://oss-fuzz.com/testcase?key=6262875648425984 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x604000f52190 Crash State: gstrdup dissectortrystringne...
