Wireshark

Wireshark

748 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2016-7175

  • EPSS 1.31%
  • Veröffentlicht 09.09.2016 10:59:00
  • Zuletzt bearbeitet 06.05.2026 22:30:45

epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

5.9

CVE-2016-5359

  • EPSS 2.61%
  • Veröffentlicht 07.08.2016 16:59:14
  • Zuletzt bearbeitet 06.05.2026 22:30:45

epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a crafted packet.

5.9

CVE-2016-5358

  • EPSS 2.35%
  • Veröffentlicht 07.08.2016 16:59:13
  • Zuletzt bearbeitet 06.05.2026 22:30:45

epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

5.9

CVE-2016-5357

  • EPSS 2.5%
  • Veröffentlicht 07.08.2016 16:59:12
  • Zuletzt bearbeitet 06.05.2026 22:30:45

wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

5.9

CVE-2016-5356

  • EPSS 2.49%
  • Veröffentlicht 07.08.2016 16:59:10
  • Zuletzt bearbeitet 06.05.2026 22:30:45

wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

5.9

CVE-2016-5355

  • EPSS 2.49%
  • Veröffentlicht 07.08.2016 16:59:09
  • Zuletzt bearbeitet 06.05.2026 22:30:45

wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

5.9

CVE-2016-5354

  • EPSS 2.76%
  • Veröffentlicht 07.08.2016 16:59:08
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

5.9

CVE-2016-5353

  • EPSS 2.39%
  • Veröffentlicht 07.08.2016 16:59:06
  • Zuletzt bearbeitet 06.05.2026 22:30:45

epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

5.9

CVE-2016-5352

  • EPSS 2.76%
  • Veröffentlicht 07.08.2016 16:59:04
  • Zuletzt bearbeitet 06.05.2026 22:30:45

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

5.9

CVE-2016-5351

Exploit
  • EPSS 2.42%
  • Veröffentlicht 07.08.2016 16:59:03
  • Zuletzt bearbeitet 06.05.2026 22:30:45

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.