Wireshark 4.0.x < 4.0.12 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.12 advisory. - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of servic...

Wireshark 3.6.x < 3.6.20 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.6.20. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.20 advisory. - IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service...

Wireshark security vulnerabilities

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from an IEEE 1609.2 parser crash that...

PT-2024-1011

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.19 Wireshark versions 4.0.0 through 4.0.11 Wireshark version 4.2.0 Description The issue is related to the GVCP dissector in Wireshark, which is associated with insufficient input validation. This can be...

CVE-2024-0211: Loop with Unreachable Exit Condition

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-0211

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-0207

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-0208: Improper Handling of Missing Values

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file...

PT-2024-1019

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.19 Wireshark versions 4.0.0 through 4.0.11 Wireshark version 4.2.0 Description The issue is related to the IEEE 1609.2 dissector in Wireshark, which can cause a crash, allowing denial of service via packet...

CVE-2024-0209

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file...

Wireshark security vulnerabilities

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from a Zigbee TLV parser crash that...

CVE-2024-0210: Uncontrolled Recursion

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-0209: NULL Pointer Dereference

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file...

CVE-2024-0207: Out-of-bounds Read

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

Wireshark security vulnerabilities

Wireshark is a very popular network packet analyzer that intercepts various network packets and displays packet details. Wireshark has a denial of service vulnerability in version 4.2.0. A crash in the HTTP3 parser in the affected version of Wireshark allows denial of service via packet injection...

CVE-2024-0208

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file...

Wireshark Security Vulnerabilities

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from a crash in the GVCP parser that...

Wireshark 3.6.x < 3.6.20 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.20. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.20 advisory. - IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of...

PT-2024-5847

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.0.0 through 4.0.16 Wireshark versions 4.2.0 through 4.2.6 Description The issue is related to a crash in the NTLMSSP dissector of Wireshark, which can be exploited to cause a denial of service via packet injection or a...