Lucene search
K

40 matches found

AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.4 views

Astra Linux – Vulnerability in Wireshark

In Wireshark versions 3.0.0 to 3.0.3, and 2.6.0 to 2.6.10, the Gryphon dissector could enter an infinite loop. This issue was addressed in the plugin file plugins/epan/gryphon/packet-gryphon.c by checking for a packet length of zero...

7.8CVSS6.7AI score0.03753EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/24 12:0 a.m.8 views

Unity Linux 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-005367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005367 advisory. In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by...

7.8CVSS5.6AI score0.03753EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-7105

Malware in sbrugna...

7.8CVSS6.9AI score0.03753EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2021-34046

Malicious code in bioql PyPI...

7.5CVSS7AI score0.02205EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.51 views

RHEL 9 : wireshark (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wireshark: Kafka dissector infinite loop CVE-2021-4190 - Crash in the Sysdig Event dissector in Wireshark...

7.9AI score0.03879EPSS
Exploits7References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:8 a.m.4 views

SUSE CVE-2019-16319

In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero...

6.5CVSS7.5AI score0.03753EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.4 views

SUSE CVE-2021-4186

Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

4.3CVSS6.9AI score0.02205EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2022/10/16 12:0 a.m.32 views

GLSA-202210-04 : Wireshark: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-04 Wireshark: Multiple Vulnerabilities - Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file CVE-2021-22235 - NULL pointer exception i...

9.8CVSS6.7AI score0.07885EPSS
Exploits21References27
Tenable Nessus
Tenable Nessus
added 2022/09/20 12:0 a.m.38 views

SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2022:3309-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3309-1 advisory. Updated to Wireshark 3.6.8: - CVE-2022-3190: Fixed F5 Ethernet Trailer dissector infinite loop...

7.5CVSS6.7AI score0.02205EPSS
Exploits2References7
OSV
OSV
added 2022/09/19 1:51 p.m.4 views

SUSE-SU-2022:3309-1 Security update for wireshark

This update for wireshark fixes the following issues: Updated to Wireshark 3.6.8: - CVE-2022-3190: Fixed F5 Ethernet Trailer dissector infinite loop bsc1203388. - CVE-2021-4186: Fixed Gryphon dissector crash bsc1194165...

7.5CVSS6.8AI score0.02205EPSS
Exploits2References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.6 views

Mageia: Security Advisory (MGASA-2019-0282)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References6
Microsoft CVE
Microsoft CVE
added 2022/01/19 8:0 a.m.4 views

Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

...

7.5CVSS7AI score0.02205EPSS
Exploits1
Veracode
Veracode
added 2022/01/05 4:25 a.m.26 views

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. The vulnerability exists because of a fuzz job in the Gryphon dissector which allows an attacker to crash the application via packet injection or crafted capture file...

7.5CVSS3.4AI score0.02205EPSS
Exploits1References13Affected Software1
CNVD
CNVD
added 2022/01/04 12:0 a.m.25 views

Wireshark RTMPT Parser Denial of Service Vulnerability

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. 3.6.0 and 3.4.0 - 3.4.10 versions of Wireshark contain a security vulnerability that could be exploited to cause a denial of service via pack...

7.5CVSS3.9AI score0.03879EPSS
Exploits1References1
CNVD
CNVD
added 2022/01/04 12:0 a.m.32 views

Wireshark Injection Vulnerability (CNVD-2022-11201)

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. An attacker could exploit this vulnerability to cause a denial of service via packet injection or specially crafted capture files...

7.5CVSS4.3AI score0.03296EPSS
Exploits1References1
CNVD
CNVD
added 2022/01/03 12:0 a.m.25 views

Wireshark input validation error vulnerability

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. An input validation error vulnerability exists in Wireshark, which stems from the product's failure to process Kafka messages effectively. An...

7.5CVSS3.9AI score0.031EPSS
Exploits1References1
OSV
OSV
added 2021/12/30 10:15 p.m.6 views

AZL-7421 CVE-2021-4186 affecting package wireshark for versions less than 3.4.14-1

Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.02205EPSS
Exploits1References1
OSV
OSV
added 2021/12/30 10:15 p.m.2 views

DEBIAN-CVE-2021-4186

Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

7.5CVSS7AI score0.02205EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2021/12/30 10:15 p.m.28 views

CVE-2021-4186

Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.02205EPSS
Exploits1References5
OSV
OSV
added 2021/12/30 10:15 p.m.3 views

UBUNTU-CVE-2021-4186

Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.02205EPSS
Exploits1References6
Rows per page
Query Builder