522 matches found
CVE-2025-13945
CVE-2025-13945 affects Wireshark 4.6.0 and 4.6.1, where the HTTP3 dissector crash can lead to denial of service. Connected advisories indicate that multiple distributions address this by upgrading Wireshark to version 4.4.13 (e.g., Debian/SUSE/openSUSE/SUSE advisories). The available sources do n...
CVE-2025-13674
A flaw in the BPv7 Bundle Protocol v7 dissector in Wireshark 4.6.0 can cause the application to crash when processing certain malformed packets or trace files. The bug was discovered during internal fuzzing and occurs due to a use-after-free memory error triggered while decoding BPv7 elements...
EUVD-2018-3397
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-25866
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed not...
ROS-20250826-04
Vulnerability of Wireshark computer network traffic analyzer related to insufficient validation of user data in the column utility module of the Dissection engine. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in the CBOR...
CVE-2020-15476
In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpisearchoracle in lib/protocols/oracle.c...
SUSE CVE-2005-1457
Multiple unknown vulnerabilities in the 1 AIM, 2 LDAP, 3 FibreChannel, 4 GSMMAP, 5 SRVLOC, and 6 NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash...
SUSE CVE-2015-3182
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
SUSE CVE-2016-4076
epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service application crash via a crafted packet...
SUSE CVE-2016-4085
Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long string in a packet...
SUSE CVE-2020-15476
In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpisearchoracle in lib/protocols/oracle.c...
SUSE CVE-2020-26420
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...
SUSE CVE-2022-0582
Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...
Fedora 36 : wireshark (2023-f9e2ad8b73)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f9e2ad8b73 advisory. New version 4.0.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
CVE-2022-4344
Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file...
CVE-2022-4344: Uncontrolled Resource Consumption
Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file...
Design/Logic Flaw
Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows...
CVE-2022-3724
Wireshark CPU: CVE-2022-3724 affects Wireshark 3.6.0–3.6.8 due to a crash in the USB HID protocol dissector, enabling denial of service via crafted captures or packet injection on Windows. OSV entries confirm the vulnerability and list the security fix, but the provided documents do not specify a...
CVE-2022-3724: Use of Externally-Controlled Format String
Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows...
