CVE-2020-26420

Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

CVE-2020-26420

Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

CVE-2020-26419

Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2020-26419

Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2020-26419

Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2020-26420: Missing Release of Memory after Effective Lifetime

Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

CVE-2020-26418: Missing Release of Memory after Effective Lifetime

Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

CVE-2020-26419: Missing Release of Memory after Effective Lifetime

Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2020-26421: Out-of-bounds Read

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

PT-2020-6561

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.2.0 through 3.2.8 Wireshark version 3.4.0 Description The issue is related to a memory leak in the Kafka protocol dissector, which can be exploited to cause a denial of service via packet injection or a crafted capture fil...

Wireshark 缓冲区错误漏洞

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. Wireshark has a denial of service...

Wireshark 安全漏洞

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A memory leak vulnerability exist...

CVE-2020-3444

A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

CVE-2020-3444: Improper Input Validation

A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

Cisco SD-WAN vEdge Input Validation Error Vulnerability

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. The Cisco SD-WAN vEdge suffers from an input validation error vulnerability that arises from a network system or product that does not properly validate...

PT-2020-4666

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Software affected versions not specified Cisco IOS XE affected versions not specified Description A vulnerability exists in the packet filtering features of the software due to improper traffic filtering conditions on an affected...

PT-2021-12655

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 12.2-STABLE before r365730 FreeBSD versions 11.4-STABLE before r365738 FreeBSD versions 12.1-RELEASE before p10 FreeBSD versions 11.4-RELEASE before p4 FreeBSD versions 11.3-RELEASE before p14 Description: A programming error...

ASB-A-148588557

In flowhashfromkeys of flowdissector.c, there is a possible packet injection due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Wireshark 2.6.x < 2.6.17 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.6.17. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.6.17 advisory. - The NFS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto...

Code injection

An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 PDATAV2 packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be...