Wireshark

Wireshark

680 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2018-11355

  • EPSS 0.58%
  • Veröffentlicht 22.05.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:12

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.

7.5

CVE-2018-11356

  • EPSS 1.18%
  • Veröffentlicht 22.05.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:12

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.

7.5

CVE-2018-11357

  • EPSS 1.18%
  • Veröffentlicht 22.05.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:12

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths.

7.5

CVE-2018-11358

  • EPSS 1.59%
  • Veröffentlicht 22.05.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:12

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup.

7.5

CVE-2018-11359

  • EPSS 1.19%
  • Veröffentlicht 22.05.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:12

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference.

7.5

CVE-2018-11360

  • EPSS 1.09%
  • Veröffentlicht 22.05.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:13

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow.

7.5

CVE-2018-11361

  • EPSS 0.58%
  • Veröffentlicht 22.05.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:13

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.

7.5

CVE-2018-11362

  • EPSS 1.59%
  • Veröffentlicht 22.05.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:13

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character.

7.5

CVE-2018-9265

Exploit
  • EPSS 0.51%
  • Veröffentlicht 04.04.2018 07:29:01
  • Zuletzt bearbeitet 21.11.2024 04:15:14

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-tn3270.c has a memory leak.

7.5

CVE-2018-9266

Exploit
  • EPSS 0.17%
  • Veröffentlicht 04.04.2018 07:29:01
  • Zuletzt bearbeitet 21.11.2024 04:15:15

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-isup.c has a memory leak.