Lucene search
+L

246 matches found

Github Security Blog
Github Security Blog
added 2026/05/15 4:31 p.m.15 views

nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT

Impact A malicious network peer can crash any Nimiq full node by publishing a crafted Kademlia DHT record containing a TaggedSigned with a signature field whose byte length is not exactly 64. When the victim node's DHT verifier calls TaggedSigned::verify, execution reaches...

7.5CVSS6AI score0.00626EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/05/10 12:0 a.m.21 views

openSUSE 16 Security Update : wireshark (openSUSE-SU-2026:20685-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20685-1 advisory. This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's parsereportdescriptor...

7.8CVSS6.5AI score0.00206EPSS
SaveExploits34References99
OSV
OSV
added 2026/05/09 12:31 p.m.12 views

OESA-2026-2226 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...

7.8CVSS5.9AI score0.00206EPSS
SaveExploits37References38
BDU FSTEC
BDU FSTEC
added 2026/05/07 12:0 a.m.12 views

The vulnerability of the dissect_bencoded_list() function in the BT-DHT protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the dissectbencodedlist function in the BT-DHT protocol analyzer of Wireshark, a computer network traffic analyzer, is related to uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits1References7Affected Software2
RedhatCVE
RedhatCVE
added 2026/05/04 10:8 a.m.25 views

CVE-2026-5408

A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the BT-DHT protocol dissector, leading to a crash. This denial of service DoS vulnerability could prevent the application from processing network traffic, impacting its availability. Mitigation To mitigate this...

6.5CVSS5.7AI score0.00143EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2026/05/01 2:12 a.m.11 views

SUSE CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00143EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/05/01 12:0 a.m.9 views

Wireshark 4.4.x < 4.4.15 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.15 advisory. - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial ...

7.8CVSS7AI score0.00306EPSS
SaveExploits39References142
Tenable Nessus
Tenable Nessus
added 2026/05/01 12:0 a.m.6 views

Wireshark 4.4.x < 4.4.15 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.15 advisory. - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of servic...

7.8CVSS7AI score0.00306EPSS
SaveExploits39References142
NVD
NVD
added 2026/04/30 7:16 a.m.8 views

CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS0.00143EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/30 7:16 a.m.10 views

UBUNTU-CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/30 5:40 a.m.5 views

CVE-2026-5408 Uncontrolled Recursion in Wireshark

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00143EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2026/04/30 5:40 a.m.59 views

CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2026/04/30 5:40 a.m.38 views

CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00143EPSS
SaveExploits1
EUVD
EUVD
added 2026/04/30 5:40 a.m.10 views

EUVD-2026-26321

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00143EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/30 5:40 a.m.6 views

CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00143EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/04/30 5:40 a.m.6 views

CVE-2026-5408 Uncontrolled Recursion in Wireshark

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS6.1AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/04/30 12:0 a.m.8 views

CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits1References1
Kaspersky
Kaspersky
added 2026/04/29 12:0 a.m.25 views

KLA91016 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in Monero protocol dissector can be exploited to cause a denial...

6.3AI score
SaveExploits0References35
OSV
OSV
added 2026/04/28 9:54 a.m.9 views

CLSA-2026-1777370059 wireshark: Fix of 7 CVEs

CVE-2021-4181: sysdig event dissector SIGSEGV fix - CVE-2021-4182: rfc7468 file parser infinite loop fix - CVE-2021-4184: bt-dht endless loop fix - CVE-2021-4186: gryphon NULL pktinfo dereference fix - CVE-2021-4190: kafka dissector varint strictness fix - CVE-2022-0581: cms dissector...

7.5CVSS7.4AI score0.03879EPSS
SaveExploits7References1
SUSE CVE
SUSE CVE
added 2026/04/04 11:26 p.m.8 views

SUSE CVE-2026-5318

A weakness has been identified in LibRaw up to 0.22.0. This impacts the function HuffTable::initval of the file src/decompressors/losslessjpeg.cpp of the component JPEG DHT Parser. This manipulation of the argument bits causes out-of-bounds write. It is possible to initiate the attack remotely. T...

5.3CVSS5.4AI score0.00629EPSS
SaveExploits1References3
Rows per page
Query Builder