CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

Advisory ROSA-SA-2024-2390

Software: wireshark 4.0.10 OS: ROSA-CHROME packageevrstring: wireshark-4.0.10-1.src.rpm CVE-ID: CVE-2023-2858 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: NetScaler file analyzer failure in Wireshark allows a denial of service via a created capture file. CVE-STATUS: Fixed CVE-REV: To close, run the...

openSUSE: Security Advisory for wireshark (SUSE-SU-2023:3252-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-277)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-277 advisory. Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file CVE-2023-3648 iSCSI dissector crash in Wireshark 4.0....

SUSE-SU-2023:3252-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 3.6.15: - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.6.15.html Security fixes: - CVE-2023-0667: Fixed failure to validate MS-MMS packet length...

Medium: wireshark

Issue Overview: Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file CVE-2023-3648 iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

CVE-2023-3648 Mismatched Memory Management Routines in Wireshark

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

CVE-2023-3648

CVE-2023-3648 affects Wireshark’s Kafka dissector, with crashes and potential DoS when processing crafted packets or captures in Wireshark 4.0.0–4.0.6 and 3.6.0–3.6.14. The provided documents confirm the affected versions and the denial-of-service impact but do not specify a fixed, patched versio...

Wireshark 3.6.x < 3.6.15 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.15. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.15 advisory. - Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet...

Wireshark 4.0.x < 4.0.7 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.7 advisory. - iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or...

Wireshark 3.6.x < 3.6.15 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.6.15. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.15 advisory. - Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or...

KLA61757 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in iSCSI dissector can be exploited to cause denial of service. 2. Denial of service...