Lucene search
+L

227 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/08 12:00 a.m.•12 views

Wireshark 1.6.x < 1.6.10 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.10 advisory. - Buffer overflow in the dissectgsmrlcmacdownlink function in epan/dissectors/packet-gsmrlcmac.c in the...

8.3CVSS7.3AI score0.02274EPSS
SaveExploits4References28
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•12 views

AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785337661)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785337661 advisory. - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted...

7.5CVSS6.7AI score0.0462EPSS
SaveExploits6References9
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•12 views

Astra Linux – Vulnerability in Wireshark

The DCP-ETSI protocol dissector in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows for denial of service attacks...

5.5CVSS5.7AI score0.0016EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•13 views

Astra Linux – Vulnerability in Wireshark

The DCP-ETSI protocol dissector in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows for denial of service attacks...

7.5CVSS7.2AI score0.00206EPSS
SaveExploits1References2
Packet Storm News
Packet Storm News
•added 2026/08/19 12:00 a.m.•40 views

Autonomous Cyber Defense in Connected Vehicles: A Multi-Agent Approach to V2X Security

A connected vehicle has roughly 100 milliseconds to decide whether an incoming Basic Safety Message is real or fabricated. If a false emergency braking alert reaches the planning pipeline in time, the car brakes - a safety failure triggered by a security failure. Existing intrusion detection...

5.5AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/08/07 12:00 a.m.•30 views

Beyond the Quantum Promise: A Security Analysis of Classical Control in Quantum Key Distribution

Quantum Key Distribution QKD protocols provide information-theoretic security by using quantum mechanical principles. Yet QKD is fundamentally a hybrid protocol: its security depends on the correct integration of the quantum phase with classical post-processing. While ETSI and ITUT specifications...

5.4AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/08/05 12:41 p.m.•28 views

Security update for wireshark

This update for wireshark fixes the following issues: Update to version 4.6.7: CVE-2026-5299: ICMPv6 dissector crash bsc1263757. CVE-2026-5401: AFP dissector crash bsc1263756. CVE-2026-5402: TLS dissector crash and possible code execution bsc1263755. CVE-2026-5403: SBC audio codec crash bsc126376...

8.8CVSS6.5AI score0.0039EPSS
SaveExploits52References224
Redos
Redos
•added 2026/07/14 12:00 a.m.•17 views

ROS-20260714-73-0027

The vulnerability of the DCP-ETSI protocol analyzer, a tool for analyzing computer network traffic with Wireshark, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.5CVSS6.8AI score0.00206EPSS
SaveExploits1
Redos
Redos
•added 2026/07/14 12:00 a.m.•24 views

ROS-20260714-73-0006

The vulnerability of the DCP-ETSI protocol analyzer, which is part of the Wireshark network traffic analyzer, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.4AI score0.0016EPSS
SaveExploits1
osv_ubuntu
osv_ubuntu
•added 2026/06/25 9:16 a.m.•23 views

UBUNTU-CVE-2026-53254

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb-data to protocol-specific structs without validating skb-len first. A malicious remote device can send truncated MCC frames and trigger...

8.1CVSS6.2AI score0.00275EPSS
SaveExploits0References34
CVE
CVE
•added 2026/06/25 8:39 a.m.•103 views

CVE-2026-53254

The CVE-2026-53254 issue affects the Linux kernel Bluetooth RFCOMM MCC handlers, which cast skb data to protocol-specific structs without validating skb-&gt;len. A malicious remote device could send truncated MCC frames, causing out-of-bounds reads. The fix is to validate and access required data...

8.1CVSS5.9AI score0.00275EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
•added 2026/06/25 8:39 a.m.•54 views

CVE-2026-53254 Bluetooth: RFCOMM: validate skb length in MCC handlers

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb-data to protocol-specific structs without validating skb-len first. A malicious remote device can send truncated MCC frames and trigger...

8.1CVSS0.00275EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/06/25 8:39 a.m.•27 views

EUVD-2026-39205

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb-data to protocol-specific structs without validating skb-len first. A malicious remote device can send truncated MCC frames and trigger...

6AI score0.00275EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/06/25 8:39 a.m.•23 views

CVE-2026-53254 Bluetooth: RFCOMM: validate skb length in MCC handlers

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb-data to protocol-specific structs without validating skb-len first. A malicious remote device can send truncated MCC frames and trigger...

8.1CVSS5.9AI score0.00275EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•29 views

PT-2026-52349

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description RFCOMM MCC handlers cast skb-data to protocol-specific structs without first validating skb-len. This allows a malicious remote device to send truncated MCC frames, triggering...

8.1CVSS6AI score0.00275EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/05/18 12:00 a.m.•17 views

DCP-ETSI Protocol Analyzer DoS

The vulnerability of the DCP-ETSI protocol analyzer, a tool for analyzing computer network traffic with Wireshark, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS6.5AI score0.00206EPSS
SaveExploits1References7Affected Software3
osv_oesa
osv_oesa
•added 2026/05/09 11:11 a.m.•41 views

OESA-2026-2226 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...

7.8CVSS6AI score0.00206EPSS
SaveExploits37References38
RedhatCVE
RedhatCVE
•added 2026/05/04 9:49 a.m.•22 views

CVE-2026-5653

A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the DCP-ETSI protocol dissector, which is responsible for analyzing network traffic, to cause a crash. This could lead to a denial of service DoS, making the application unavailable to users. Mitigation To reduce th...

7.5CVSS6.2AI score0.00206EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/05/04 9:18 a.m.•19 views

CVE-2026-6530

A flaw was found in Wireshark. A remote attacker could exploit a crash in the DCP-ETSI protocol dissector by crafting a malicious network packet. This vulnerability allows for a denial of service DoS, making the Wireshark application unavailable. Mitigation To mitigate this issue, users should...

6.5CVSS5.8AI score0.0016EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2026/05/02 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-5653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-5653 Note that Nessus relies on the presence...

7.5CVSS6.3AI score0.00206EPSS
SaveExploits1References3
Rows per page
Query Builder