WI
Product
Wireshark
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 237Medium 233Low 1
Watch
Add Wireshark to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3724 | 7.5 | Dec 9 | Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows Affected: 3.6.0 through 3.6.8 |
| CVE-2022-3725 | 7.5 | Oct 27 | Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file Affected: 3.6.0 through 3.6.8 |
| CVE-2022-0586 | 7.5 | Feb 14 | Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.12; 3.6.0 before 3.6.2 |
| CVE-2022-0583 | 7.5 | Feb 14 | Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.12; 3.6.0 before 3.6.2 |
| CVE-2022-0581 | 7.5 | Feb 14 | Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.12; 3.6.0 before 3.6.2 |
| CVE-2021-4190 | 7.5 | Dec 30 | Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.12; 3.6.0 |
| CVE-2021-4186 | 7.5 | Dec 30 | Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 through 3.4.10 |
| CVE-2021-4185 | 7.5 | Dec 30 | Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.11; 3.6.0 |
| CVE-2021-4184 | 7.5 | Dec 30 | Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 through 3.4.10; 3.6.0 |
| CVE-2021-4182 | 7.5 | Dec 30 | Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.11; 3.6.0 |
| CVE-2021-4181 | 7.5 | Dec 30 | Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.11; 3.6.0 |
| CVE-2021-39929 | 7.5 | Nov 19 | Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9 |
| CVE-2021-39926 | 7.5 | Nov 19 | Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 through 3.4.9 |
| CVE-2021-39925 | 7.5 | Nov 19 | Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9 |
| CVE-2021-39924 | 7.5 | Nov 19 | Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9 |
| CVE-2021-39923 | 7.5 | Nov 19 | Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9 |
| CVE-2021-39922 | 7.5 | Nov 19 | Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9 |
| CVE-2021-39921 | 7.5 | Nov 19 | NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9 |
| CVE-2021-39928 | 7.5 | Nov 18 | NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 before 3.2.18; 3.4.0 before 3.4.10 |
| CVE-2021-39920 | 7.5 | Nov 18 | NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.10 |
| CVE-2021-22235 | 7.5 | Jul 20 | Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file Affected: 3.2.0 before 3.2.15; 3.4.0 before 3.4.7 |
| CVE-2021-22222 | 7.5 | Jun 7 | Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 through 3.4.5 |
| CVE-2021-22174 | 7.5 | Feb 17 | Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.3 |
| CVE-2021-22173 | 7.5 | Feb 17 | Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.3 |
| CVE-2020-28030 | 7.5 | Nov 2 | In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash Affected: 3.2.0 through 3.2.7 |
| CVE-2020-26575 | 7.5 | Oct 6 | In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop Affected: through 3.2.7 |
| CVE-2020-25866 | 7.5 | Oct 6 | In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages Affected: 3.0.0 through 3.0.13; 3.2.0 through 3.2.6 |
| CVE-2020-25863 | 7.5 | Oct 6 | In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash Affected: 2.6.0 through 2.6.20; 3.0.0 through 3.0.13; 3.2.0 through 3.2.6 |
| CVE-2020-25862 | 7.5 | Oct 6 | In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash Affected: 2.6.0 through 2.6.20; 3.0.0 through 3.0.13; 3.2.0 through 3.2.6 |
| CVE-2020-15466 | 7.5 | Jul 5 | In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop Affected: 3.2.0 through 3.2.4 |
| CVE-2020-13164 | 7.5 | May 19 | In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash Affected: 2.6.0 through 2.6.16; 3.0.0 through 3.0.10; 3.2.0 through 3.2.3 |
| CVE-2020-11647 | 7.5 | Apr 10 | In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash Affected: 2.6.0 through 2.6.15; 3.0.0 through 3.0.9; 3.2.0 through 3.2.2 |
| CVE-2020-9431 | 7.5 | Feb 27 | In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory Affected: 2.6.0 through 2.6.14; 3.0.0 through 3.0.8; 3.2.0 through 3.2.1 |
| CVE-2020-9430 | 7.5 | Feb 27 | In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash Affected: 2.6.0 through 2.6.14; 3.0.0 through 3.0.8; 3.2.0 through 3.2.1 |
| CVE-2020-9429 | 7.5 | Feb 27 | In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash Affected: 3.2.0 through 3.2.1 |
| CVE-2020-9428 | 7.5 | Feb 27 | In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash Affected: 2.6.0 through 2.6.14; 3.0.0 through 3.0.8; 3.2.0 through 3.2.1 |
| CVE-2020-7044 | 7.5 | Jan 16 | In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash Affected: 3.2.0 before 3.2.1 |
| CVE-2019-19553 | 7.5 | Dec 5 | In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash Affected: 2.6.0 through 2.6.12; 3.0.0 through 3.0.6 |
| CVE-2019-16319 | 7.5 | Sep 15 | In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop Affected: 2.6.0 through 2.6.10; 3.0.0 through 3.0.3 |
| CVE-2019-13619 | 7.5 | Jul 17 | In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash Affected: 2.4.0 through 2.4.15; 2.6.0 through 2.6.9; 3.0.0 through 3.0.2 |
| CVE-2019-12295 | 7.5 | May 23 | In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash Affected: 2.4.0 through 2.4.14; 2.6.0 through 2.6.8; 3.0.0 through 3.0.1 |
| CVE-2019-10903 | 7.5 | Apr 9 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0 |
| CVE-2019-10902 | 7.5 | Apr 9 | In Wireshark 3.0.0, the TSDNS dissector could crash Affected: 3.0.0 |
| CVE-2019-10901 | 7.5 | Apr 9 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0 |
| CVE-2019-10900 | 7.5 | Apr 9 | In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop Affected: 3.0.0 |
| CVE-2019-10899 | 7.5 | Apr 9 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0 |
| CVE-2019-10898 | 7.5 | Apr 9 | In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop Affected: 3.0.0 |
| CVE-2019-10897 | 7.5 | Apr 9 | In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop Affected: 3.0.0 |
| CVE-2019-10896 | 7.5 | Apr 9 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0 |
| CVE-2019-10895 | 7.5 | Apr 9 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
