Search CVE reports


Toggle filters

11 – 20 of 722 results


CVE-2024-4854

Medium priority
Vulnerable

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2024-4853

Medium priority
Vulnerable

Memory handling issue in editcap could cause denial of service via crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2024-2955

Medium priority
Vulnerable

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2023-6175

Medium priority
Vulnerable

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2024-24479

Medium priority
Ignored

A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release...

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Not affected Not affected Not affected
Show less packages

CVE-2024-24476

Medium priority
Ignored

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release...

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Not affected Not affected Not affected
Show less packages

CVE-2024-24478

Medium priority
Ignored

An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the...

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Not affected Not affected Not affected
Show less packages

CVE-2024-0211

Medium priority
Vulnerable

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2024-0210

Medium priority
Ignored

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Not affected Not affected Not affected
Show less packages

CVE-2024-0209

Medium priority
Vulnerable

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Vulnerable Vulnerable Vulnerable
Show less packages