WI
Product
Wireshark
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 237Medium 233Low 1
Watch
Add Wireshark to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-8723 | 5.5 | Jan 4 | The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more |
| CVE-2015-8722 | 5.5 | Jan 4 | epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8721 | 5.5 | Jan 4 | Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers to cause a denial of service… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more |
| CVE-2015-8720 | 5.5 | Jan 4 | The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more |
| CVE-2015-8719 | 5.5 | Jan 4 | The dissect_dns_answer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 Client Subnet option, which allows… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more |
| CVE-2015-8718 | 5.5 | Jan 4 | Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8717 | 5.5 | Jan 4 | The dissect_sdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more |
| CVE-2015-8716 | 5.5 | Jan 4 | The init_t38_info_conv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8715 | 5.5 | Jan 4 | epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does not check for empty arguments, which allows remote attackers to cause a denial of… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more |
| CVE-2015-8714 | 5.5 | Jan 4 | The dissect_dcom_OBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more |
| CVE-2015-8713 | 5.5 | Jan 4 | epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more |
| CVE-2015-8712 | 5.5 | Jan 4 | The dissect_hsdsch_channel_info function in epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more |
| CVE-2015-8711 | 5.5 | Jan 4 | epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-3182 | 5.5 | Jan 4 | epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to… Affected: 1.10.12; 1.10.13; 1.10.14 |
| CVE-2020-26422 | 5.3 | Dec 21 | Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file Affected: 3.4.0; 3.4.1 |
| CVE-2020-26421 | 5.3 | Dec 11 | Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 through 3.2.8; 3.4.0 |
| CVE-2020-26420 | 5.3 | Dec 11 | Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 through 3.2.8; 3.4.0 |
| CVE-2020-26419 | 5.3 | Dec 11 | Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 |
| CVE-2020-26418 | 5.3 | Dec 11 | Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 through 3.2.8; 3.4.0 |
| CVE-2015-8740 | 5.3 | Jan 4 | The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which… Affected: 2.0.0 |
| CVE-2026-95394 | 4.7 | Sep 29 | Unchecked Input for Loop Condition in Wireshark Affected: 4.4.0 before 4.4.19; 4.6.0 before 4.6.9 |
| CVE-2026-95393 | 4.7 | Sep 29 | Heap-based Buffer Overflow in Wireshark Affected: 4.4.0 before 4.4.19; 4.6.0 before 4.6.9 |
| CVE-2022-4344 | 4.3 | Jan 12 | Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file Affected: 3.0.0 before 3.6.10; 4.0.0 before 4.0.2 |
| CVE-2026-15168 | 3.3 | Jul 8 | Use of Uninitialized Variable in Wireshark Affected: 4.4.0 before 4.4.17; 4.6.0 before 4.6.7 |
| CVE-2015-7830 | – | Nov 15 | The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +2 more |
| CVE-2015-6249 | – | Aug 24 | The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +1 more |
| CVE-2015-6248 | – | Aug 24 | The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +1 more |
| CVE-2015-6247 | – | Aug 24 | The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 does not validate a certain offset… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +1 more |
| CVE-2015-6246 | – | Aug 24 | The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +1 more |
| CVE-2015-6245 | – | Aug 24 | epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +1 more |
| CVE-2015-6244 | – | Aug 24 | The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +1 more |
| CVE-2015-6243 | – | Aug 24 | The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +1 more |
| CVE-2015-6242 | – | Aug 24 | The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +1 more |
| CVE-2015-6241 | – | Aug 24 | The proto_tree_add_bytes_item function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +1 more |
| CVE-2015-4652 | – | Jul 22 | epan/dissectors/packet-gsm_a_dtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly validate digit characters, which allows remote attackers to cause… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5 |
| CVE-2015-4651 | – | Jul 22 | The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5 |
| CVE-2015-3906 | – | May 26 | The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly handle a lack of \0 termination, which… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4 |
| CVE-2015-3815 | – | May 26 | The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4 |
| CVE-2015-3814 | – | May 26 | The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x… Affected: 1.10.0; 1.10.1; 1.10.2; 1.10.3; 1.10.4; 1.10.5; +14 more |
| CVE-2015-3813 | – | May 26 | The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4 |
| CVE-2015-3812 | – | May 26 | Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow… Affected: 1.10.0; 1.10.1; 1.10.2; 1.10.3; 1.10.4; 1.10.5; +13 more |
| CVE-2015-3811 | – | May 26 | epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote… Affected: 1.10.0; 1.10.1; 1.10.2; 1.10.3; 1.10.4; 1.10.5; +13 more |
| CVE-2015-3810 | – | May 26 | epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4 |
| CVE-2015-3809 | – | May 26 | The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4 |
| CVE-2015-3808 | – | May 26 | The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4 |
| CVE-2015-2192 | – | Mar 8 | Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3 |
| CVE-2015-2191 | – | Mar 8 | Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote… Affected: 1.10.0; 1.10.1; 1.10.2; 1.10.3; 1.10.4; 1.10.5; +11 more |
| CVE-2015-2190 | – | Mar 8 | epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote attackers to cause a denial of service… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3 |
| CVE-2015-2189 | – | Mar 8 | Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to… Affected: 1.10.0; 1.10.1; 1.10.2; 1.10.3; 1.10.4; 1.10.5; +11 more |
| CVE-2015-2188 | – | Mar 8 | epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote… Affected: 1.10.0; 1.10.1; 1.10.2; 1.10.3; 1.10.4; 1.10.5; +11 more |
The 500 most important CVEs for this product (exploited first, then by severity)