Wireshark

Wireshark

680 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2018-19627

Exploit
  • EPSS 19.21%
  • Published 29.11.2018 04:29:00
  • Last modified 21.11.2024 03:58:18

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary.

7.5

CVE-2018-19628

Exploit
  • EPSS 0.95%
  • Published 29.11.2018 04:29:00
  • Last modified 21.11.2024 03:58:18

In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error.

7.8

CVE-2018-18226

  • EPSS 1.48%
  • Published 12.10.2018 06:29:01
  • Last modified 21.11.2024 03:55:33

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.

7.5

CVE-2018-18227

  • EPSS 1.84%
  • Published 12.10.2018 06:29:01
  • Last modified 21.11.2024 03:55:34

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.

7.5

CVE-2018-18225

  • EPSS 1.18%
  • Published 12.10.2018 06:29:00
  • Last modified 21.11.2024 03:55:33

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.

7.5

CVE-2018-16056

  • EPSS 0.53%
  • Published 30.08.2018 01:29:00
  • Last modified 21.11.2024 03:52:00

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists.

7.5

CVE-2018-16057

  • EPSS 1.28%
  • Published 30.08.2018 01:29:00
  • Last modified 21.11.2024 03:52:00

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations.

7.5

CVE-2018-16058

  • EPSS 1.05%
  • Published 30.08.2018 01:29:00
  • Last modified 21.11.2024 03:52:01

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure.

7.5

CVE-2018-14438

  • EPSS 0.12%
  • Published 20.07.2018 00:29:00
  • Last modified 21.11.2024 03:49:03

In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily.

7.5

CVE-2018-14339

  • EPSS 0.88%
  • Published 19.07.2018 02:29:00
  • Last modified 21.11.2024 03:48:51

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.