Lucene search
+L

1373 matches found

CVE
CVE
added 2024/01/03 7:31 a.m.98 views

CVE-2024-0207

CVE-2024-0207 affects Wireshark 4.2.0, where the HTTP3 dissector crashes, allowing denial of service via packet injection or crafted capture files. Evidence from multiple sources confirms the vulnerability in the HTTP3 parser with DoS impact (CVE-2024-0207). remediation: upgrade to Wireshark 4.2....

7.8CVSS7.5AI score0.00466EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2024/01/03 7:31 a.m.46 views

CVE-2024-0207 Out-of-bounds Read in Wireshark

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.8AI score0.00466EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2024/01/03 7:31 a.m.74 views

CVE-2024-0207

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2024/01/03 12:00 a.m.34 views

CVE-2024-0208

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.8AI score0.01838EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2024/01/03 12:00 a.m.34 views

CVE-2024-0209

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.8AI score0.00579EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2024/01/03 12:00 a.m.30 views

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.8AI score0.00466EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/03 12:00 a.m.4 views

Wireshark Security Vulnerabilities

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from a crash in the GVCP parser that...

7.8CVSS7.1AI score0.01838EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2024/01/03 12:00 a.m.33 views

CVE-2024-0207

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.8AI score0.00466EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:00 a.m.40 views

Wireshark 4.2.x < 4.2.1 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.2.1 advisory. - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packe...

7.8CVSS6.9AI score0.01838EPSS
SaveExploits5References16
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:00 a.m.35 views

Wireshark 3.6.x < 3.6.20 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.6.20. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.20 advisory. - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via...

7.8CVSS6.9AI score0.01838EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:00 a.m.51 views

Wireshark 3.6.x < 3.6.20 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.20. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.20 advisory. - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of servic...

7.8CVSS6.9AI score0.01838EPSS
SaveExploits2References7
UbuntuCve
UbuntuCve
added 2024/01/03 12:00 a.m.32 views

CVE-2024-0211

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.8AI score0.00543EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/03 12:00 a.m.10 views

Wireshark 安全漏洞

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from a Zigbee TLV parser crash that...

7.8CVSS7.1AI score0.00466EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:00 a.m.40 views

Wireshark 4.0.x < 4.0.12 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.12 advisory. - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of servic...

7.8CVSS6.9AI score0.01838EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
added 2023/12/15 12:00 a.m.39 views

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-440)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-440 advisory. SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file CVE-2023-6174 A heap based buffer overflow in Wireshark's NetScreen file...

7.8CVSS6.9AI score0.03456EPSS
SaveExploits0References6
Veracode
Veracode
added 2023/11/28 2:33 p.m.29 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists in the SSH dissector, which allows an attacker to cause an application crash through the malicious packet injection or crafted capture file...

6.5CVSS7.2AI score0.00746EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/11/25 12:00 a.m.21 views

Fedora 39 : python-asyncssh (2023-d2956318e4)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d2956318e4 advisory. Security fix for CVE-2023-46446 and CVE-2023-46445 Tenable has extracted the preceding description block directly from the Fedora security advisory...

6.8CVSS6.9AI score0.00867EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/11/20 12:00 a.m.32 views

Debian DSA-5559-1 : wireshark - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5559 advisory. A vulnerability was discovered in the SSH dissector of Wireshark, a network protocol analyzer, which could result in denial of service or potentially the executio...

7.8CVSS6.7AI score0.03456EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/11/17 2:02 a.m.5 views

SUSE CVE-2023-6174

SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file...

6.5CVSS7AI score0.00746EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2023/11/16 7:15 p.m.34 views

CVE-2023-6174

An invalid memory block read was found in Wireshark's SSH dissector. This issue may lead to an application crash and denial of service via packet injection or crafted capture file...

4.3CVSS6.4AI score0.00746EPSS
SaveExploits0References5
Rows per page
Query Builder