Lucene search
+L

1292 matches found

OSV
OSV
added 2024/08/29 12:15 a.m.1 views

DEBIAN-CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/29 12:15 a.m.7 views

AZL-48339 CVE-2024-8250 affecting package wireshark for versions less than 4.4.7-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS7.1AI score0.00317EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/29 12:15 a.m.5 views

AZL-48338 CVE-2024-8250 affecting package wireshark 4.0.8-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS7.1AI score0.00317EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/08/28 11:30 p.m.22 views

CVE-2024-8250 Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.6AI score0.00317EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/08/28 11:30 p.m.48 views

CVE-2024-8250 Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS0.00317EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/28 11:30 p.m.21 views

CVE-2024-8250 Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.3AI score0.00317EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2024/08/28 11:30 p.m.23 views

CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.2AI score0.00317EPSS
SaveExploits1
Amazon
Amazon
added 2024/07/22 12:0 a.m.3 views

Medium: wireshark

Issue Overview: Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file CVE-2022-3190 Memory handling issue in editcap could cause denial of service via crafted capture file...

7.5CVSS7.7AI score0.0182EPSS
SaveExploits3
OSV
OSV
added 2024/06/14 11:8 a.m.5 views

OESA-2024-1726 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0...

7.5CVSS7.1AI score0.00811EPSS
SaveExploits0References2
Veracode
Veracode
added 2024/05/23 11:16 a.m.20 views

Denial Of Service (DOS)

Wireshark is vulnerable to Denial Of Service DOS. The vulnerability is due to MONGO and ZigBee TLV dissector infinite loops resulting in Unreachable Exit Condition via packet injection or crafted capture file...

7.5CVSS7.3AI score0.00811EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2024/05/21 4:15 p.m.10 views

UBUNTU-CVE-2023-52843

In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header LLC reads the mac header with ethhdr without verifying that the skb has an Ethernet header. Syzbot was able to enter llcrcv on a tun device. Tun can insert packets without mac len and...

5.5CVSS6AI score0.00245EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2024/05/16 4:14 p.m.24 views

CVE-2023-48643

Shrubbery tacplus 2.x, 3.x. and 4.x through F4.0.4.28 allows unauthenticated Remote Command Execution. The product allows users to configure authorization checks as shell commands through the tacplus.cfg configuration file. These are executed when a client sends an authorization request with a...

7.7AI score0.01096EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/05/15 10:24 p.m.51 views

CVE-2024-4854

A flaw was found in the MONGO and ZigBee TLV dissectors of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing an infinite loop, resulting in a denial of service. Mitigation Mitigation for this issue is either not available or the currently...

6.5CVSS6.1AI score0.00811EPSS
SaveExploits0References4
NVD
NVD
added 2024/05/14 3:45 p.m.16 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS6.4AI score0.00811EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2024/05/14 3:45 p.m.22 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS6.8AI score0.00811EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/05/14 12:3 a.m.33 views

CVE-2024-4854 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

6.4CVSS6.9AI score0.00811EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/05/14 12:3 a.m.24 views

CVE-2024-4854 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

6.4CVSS7AI score0.00811EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2024/05/14 12:3 a.m.27 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS7.6AI score0.00811EPSS
SaveExploits0
OSV
OSV
added 2024/05/14 12:3 a.m.17 views

CVE-2024-4854 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

6.4CVSS6.7AI score0.00811EPSS
SaveExploits0References9
AlpineLinux
AlpineLinux
added 2024/05/14 12:3 a.m.30 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS6.7AI score0.00811EPSS
SaveExploits0
Rows per page
Query Builder