25525 matches found
SUSE CVE-2025-5399
Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS...
SUSE CVE-2025-5601
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file...
OSV-2025-433 Null-dereference READ in _libssh2_packet_add
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422217191 Crash type: Null-dereference READ Crash state: libssh2packetadd fullpacket libssh2transportread...
Wireshark Security Update (wnpa-sec-2025-02) - Mac OS X
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
DEBIAN-CVE-2025-5601
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file...
CVE-2025-5601
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file...
UBUNTU-CVE-2025-5601
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file...
CVE-2025-5601
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file...
CVE-2025-5601
Wireshark (versions 4.4.0–4.4.6 and 4.2.0–4.2.12) is affected by CVE-2025-5601 due to a vulnerability in the column handling/processing code that can trigger a denial of service when processing crafted packets or captures. The underlying issue is described as a buffer handling flaw (buffer overfl...
CVE-2025-5601 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file...
CVE-2025-5601 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file...
CVE-2025-5601 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file...
CVE-2025-5601
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file...
CVE-2025-20674
In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303...
Wireshark 4.2.x < 4.2.12 / 4.4.x < 4.4.7 DoS
The version of Wireshark installed on the remote Windows host is 4.2.x prior to 4.2.12 or 4.4.x prior to 4.4.7. It is, therefore, affected by a denial of service vulnerability as referenced in the wnpa-sec-2025-02 advisory. - Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12...
PT-2025-23794
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.4.6 Description The issue is a crash in the column handling functionality of Wireshark. This can be triggered by injecting packets or using a crafted capture file, leading to a denial of service. The root cau...
CVE-2024-53020
Information disclosure may occur while decoding the RTP packet with invalid header extension from network...
CVE-2024-53019
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources...