265 matches found
PT-2023-16251 · Wireshark +3 · Wireshark +3
Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.6.0 through 3.6.10 Wireshark versions 4.0.0 through 4.0.2 Description: The issue is related to a dissection engine bug in Wireshark, which allows for denial of service via packet injection or crafted capture file...
CVE-2023-0413
Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...
CVE-2023-0413
Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...
CVE-2023-0413
Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...
CVE-2023-0413
Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...
Wireshark 3.6.x < 3.6.11 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 3.6.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.11 advisory. - Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service...
Wireshark 4.0.x < 4.0.3 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 4.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.3 advisory. - Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service vi...
UBUNTU-CVE-2022-4345
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file...
wireshark:fuzzshark_ip: Heap-buffer-overflow in get_utf_8_string
Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6064740474683392 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...
PT-2022-36723 · Git +1 · Wireshark
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions, including expert set info vformat, expert add info...
wireshark:fuzzshark_ip: Stack-buffer-overflow in get_transaction
Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5849610676994048 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Crash Type:...
wireshark:fuzzshark_ip_proto-udp: Heap-use-after-free in g_strdup
Detailed Report: https://oss-fuzz.com/testcase?key=4547372185681920 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x603005b02d10 Crash State: gstrdup findstringdtblentry...
wireshark:fuzzshark_ip: Heap-use-after-free in wmem_strdup
Detailed Report: https://oss-fuzz.com/testcase?key=5835439865462784 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x609001256e70 Crash State: wmemstrdup...
OESA-2021-1285 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash...
The vulnerability of the dissection engine component in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the dissection engine component in the Wireshark computer network analysis tool is related to a lack of mechanisms for controlling code generation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Wireshark 3.4.x < 3.4.1 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.4.1 advisory. - Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8...
Wireshark 3.4.x < 3.4.1 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 3.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.4.1 advisory. - Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows...
Information Disclosure
wireshark is vulnerable to information disclosure. The vulnerability exists through a memory leak in the dissection engine...
