Wireshark

Wireshark

680 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-9430

Exploit
  • EPSS 3.61%
  • Published 27.02.2020 23:15:12
  • Last modified 21.11.2024 05:40:37

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.

7.5

CVE-2020-7044

Exploit
  • EPSS 0.73%
  • Published 16.01.2020 04:15:11
  • Last modified 21.11.2024 05:36:32

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors.

6.5

CVE-2020-7045

Exploit
  • EPSS 0.14%
  • Published 16.01.2020 04:15:11
  • Last modified 21.11.2024 05:36:33

In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.

7.5

CVE-2019-19553

  • EPSS 0.66%
  • Published 05.12.2019 01:15:14
  • Last modified 21.11.2024 04:34:57

In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.

7.8

CVE-2019-16319

  • EPSS 0.77%
  • Published 15.09.2019 16:15:13
  • Last modified 21.11.2024 04:30:31

In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.

7.5

CVE-2019-13619

Exploit
  • EPSS 9.82%
  • Published 17.07.2019 20:15:11
  • Last modified 21.11.2024 04:25:22

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.

7.5

CVE-2019-12295

  • EPSS 2.5%
  • Published 23.05.2019 12:29:00
  • Last modified 21.11.2024 04:22:34

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

7.5

CVE-2019-10895

Exploit
  • EPSS 12.83%
  • Published 09.04.2019 04:29:01
  • Last modified 21.11.2024 04:20:04

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.

7.5

CVE-2019-10896

Exploit
  • EPSS 12.26%
  • Published 09.04.2019 04:29:01
  • Last modified 21.11.2024 04:20:04

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

7.5

CVE-2019-10897

Exploit
  • EPSS 0.65%
  • Published 09.04.2019 04:29:01
  • Last modified 21.11.2024 04:20:04

In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.