Wireshark

Wireshark

689 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2018-9259

Exploit
  • EPSS 0.74%
  • Veröffentlicht 04.04.2018 07:29:00
  • Zuletzt bearbeitet 21.11.2024 04:15:14

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth.

7.5

CVE-2018-9260

Exploit
  • EPSS 0.52%
  • Veröffentlicht 04.04.2018 07:29:00
  • Zuletzt bearbeitet 21.11.2024 04:15:14

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c by ensuring that an allocation step occurs.

7.5

CVE-2018-9261

Exploit
  • EPSS 0.72%
  • Veröffentlicht 04.04.2018 07:29:00
  • Zuletzt bearbeitet 21.11.2024 04:15:14

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs.

7.5

CVE-2018-9262

Exploit
  • EPSS 0.5%
  • Veröffentlicht 04.04.2018 07:29:00
  • Zuletzt bearbeitet 21.11.2024 04:15:14

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth.

7.5

CVE-2018-9263

Exploit
  • EPSS 0.57%
  • Veröffentlicht 04.04.2018 07:29:00
  • Zuletzt bearbeitet 21.11.2024 04:15:14

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was addressed in epan/dissectors/packet-kerberos.c by ensuring a nonzero key length.

7.5

CVE-2018-9264

Exploit
  • EPSS 0.7%
  • Veröffentlicht 04.04.2018 07:29:00
  • Zuletzt bearbeitet 21.11.2024 04:15:14

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-adb.c by checking for a length inconsistency.

7.5

CVE-2018-7330

  • EPSS 0.36%
  • Veröffentlicht 23.02.2018 22:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:01

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a correct integer data type.

7.5

CVE-2018-7331

  • EPSS 1.3%
  • Veröffentlicht 23.02.2018 22:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:02

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length.

7.5

CVE-2018-7332

  • EPSS 0.37%
  • Veröffentlicht 23.02.2018 22:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:02

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a length.

7.5

CVE-2018-7333

  • EPSS 0.36%
  • Veröffentlicht 23.02.2018 22:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:02

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size.