Lucene search
+L

75 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/23 12:00 a.m.•5 views

CVE-2021-22207: Allocation of Resources Without Limits or Throttling

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file...

6.5CVSS5.7AI score0.02023EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/04/22 12:00 a.m.•27 views

Wireshark SQL注入漏洞

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A memory consumption vulnerabilit...

6.5CVSS5.8AI score0.02023EPSS
SaveExploits1References20
Tenable Nessus
Tenable Nessus
•added 2021/04/22 12:00 a.m.•55 views

Wireshark 3.4.x < 3.4.5 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.4.5. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.5 advisory. - Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service...

6.5CVSS6.8AI score0.02023EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2019/01/22 12:00 a.m.•46 views

Wireshark 2.6.x < 2.6.4 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.6.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.4 advisory. - In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was...

7.8CVSS6.9AI score0.11809EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2019/01/02 12:00 a.m.•30 views

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2018:3282-1)

This update for wireshark fixes the following issues : Wireshark was updated to 2.4.10 bsc1111647. Following security issues were fixed : CVE-2018-18227: MS-WSP dissector crash wnpa-sec-2018-47 CVE-2018-12086: OpcUA dissector crash wnpa-sec-2018-50 Further bug fixes and updated protocol support...

7.5CVSS7.4AI score0.11809EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2018/11/01 12:00 a.m.•39 views

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:3590-1)

This update for wireshark fixes the following issues : Wireshark was updated to 2.4.10 bsc1111647. Following security issues were fixed : CVE-2018-18227: MS-WSP dissector crash wnpa-sec-2018-47 CVE-2018-12086: OpcUA dissector crash wnpa-sec-2018-50 Further bug fixes and updated protocol support...

7.5CVSS7.4AI score0.11809EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2018/10/15 12:00 a.m.•35 views

Wireshark MS-WSP Dissector Denial of Service Vulnerability (wnpa-sec-2018-47) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS7.4AI score0.0318EPSS
SaveExploits0References2
NVD
NVD
•added 2018/10/12 6:29 a.m.•15 views

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

7.5CVSS7.3AI score0.0318EPSS
SaveExploits0References8
OSV
OSV
•added 2018/10/12 6:29 a.m.•8 views

DEBIAN-CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

7.5CVSS8.7AI score0.0318EPSS
SaveExploits0References1
Prion
Prion
•added 2018/10/12 6:29 a.m.•21 views

Input validation

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

5CVSS7.3AI score0.0318EPSS
SaveExploits0References8Affected Software2
UbuntuCve
UbuntuCve
•added 2018/10/12 6:29 a.m.•25 views

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

7.5CVSS7.1AI score0.0318EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2018/10/12 5:00 a.m.•39 views

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

7.4AI score0.0318EPSS
SaveExploits0References8
CVE
CVE
•added 2018/10/12 5:00 a.m.•236 views

CVE-2018-18227

CVE-2018-18227 affects Wireshark where the MS-WSP protocol dissector could crash. Affected ranges are Wireshark 2.6.0–2.6.3 and 2.4.0–2.4.9. Root cause: NULL return values not handled in epan/dissectors/packet-mswsp.c; remediation is upstream patch to properly handle NULLs. In practice, the vulne...

7.5CVSS7.2AI score0.0318EPSS
SaveExploits0References8Affected Software1
Mend
Mend
•added 2018/10/12 5:00 a.m.•1 views

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

8.7CVSS0.0318EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2018/10/12 5:00 a.m.•49 views

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

7.5CVSS1.3AI score0.0318EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2018/10/12 5:00 a.m.•96 views

CVE-2018-18227

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

7.5CVSS7.5AI score0.0318EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/12 12:00 a.m.•3 views

CVE-2018-18227: NULL Pointer Dereference

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values...

7.5CVSS7.1AI score0.0318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/04/03 12:00 a.m.•1 views

PT-2018-2641

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.9 Wireshark versions 2.6.0 through 2.6.3 Description The issue is related to a NULL pointer dereference in the Wireshark program, which can cause a crash. This can be exploited by a remote attacker to cause...

7.5CVSS0.0318EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2016/05/03 12:00 a.m.•43 views

Wireshark Multiple Denial of Service Vulnerabilities (May 2016) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.9CVSS6.6AI score0.01995EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2016/05/03 12:00 a.m.•50 views

FreeBSD : wireshark -- multiple vulnerabilities (7e36c369-10c0-11e6-94fa-002590263bf5)

Wireshark development team reports : The following vulnerabilities have been fixed : - wnpa-sec-2016-19 The NCP dissector could crash. Bug 11591 - wnpa-sec-2016-20 TShark could crash due to a packet reassembly bug. Bug 11799 - wnpa-sec-2016-21 The IEEE 802.11 dissector could crash. Bug 11824, Bug...

5.9CVSS6.3AI score0.0239EPSS
SaveExploits1References13
Rows per page
Query Builder