WI
Product
Wireshark
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 237Medium 233Low 1
Watch
Add Wireshark to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5358 | 5.9 | Aug 7 | epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3 |
| CVE-2016-5357 | 5.9 | Aug 7 | wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +10 more |
| CVE-2016-5356 | 5.9 | Aug 7 | wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +10 more |
| CVE-2016-5355 | 5.9 | Aug 7 | wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +10 more |
| CVE-2016-5354 | 5.9 | Aug 7 | The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a denial of service (application crash)… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +10 more |
| CVE-2016-5353 | 5.9 | Aug 7 | epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +10 more |
| CVE-2016-5352 | 5.9 | Aug 7 | epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3 |
| CVE-2016-5351 | 5.9 | Aug 7 | epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +10 more |
| CVE-2016-6513 | 5.9 | Aug 6 | epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4 |
| CVE-2016-6512 | 5.9 | Aug 6 | epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4 |
| CVE-2016-6511 | 5.9 | Aug 6 | epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +12 more |
| CVE-2016-6510 | 5.9 | Aug 6 | Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +12 more |
| CVE-2016-6509 | 5.9 | Aug 6 | epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +12 more |
| CVE-2016-6508 | 5.9 | Aug 6 | epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +12 more |
| CVE-2016-6507 | 5.9 | Aug 6 | epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +12 more |
| CVE-2016-6506 | 5.9 | Aug 6 | epan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (infinite loop) via… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +12 more |
| CVE-2016-6505 | 5.9 | Aug 6 | epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +12 more |
| CVE-2016-6504 | 5.9 | Aug 6 | epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, which allows remote attackers to cause… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +7 more |
| CVE-2016-6503 | 5.9 | Aug 6 | The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4 |
| CVE-2016-4421 | 5.9 | May 1 | epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (deep… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +6 more |
| CVE-2016-4420 | 5.9 | May 1 | The NFS dissector in Wireshark 2.x before 2.0.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet Affected: 2.0.0; 2.0.1 |
| CVE-2016-4419 | 5.9 | May 1 | epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to cause a denial of service (large… Affected: 2.0.0; 2.0.1 |
| CVE-2016-4418 | 5.9 | May 1 | epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +6 more |
| CVE-2016-4417 | 5.9 | May 1 | Off-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +6 more |
| CVE-2016-4416 | 5.9 | May 1 | epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.2 mishandles the Grouping subfield, which allows remote attackers to cause a denial of… Affected: 2.0.0; 2.0.1 |
| CVE-2016-4415 | 5.9 | May 1 | wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of… Affected: 2.0.0; 2.0.1 |
| CVE-2016-4085 | 5.9 | Apr 25 | Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +8 more |
| CVE-2016-4084 | 5.9 | Apr 25 | Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a denial of service (integer… Affected: 2.0.0; 2.0.1; 2.0.2 |
| CVE-2016-4083 | 5.9 | Apr 25 | epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not ensure that data is available before array allocation, which allows remote… Affected: 2.0.0; 2.0.1; 2.0.2 |
| CVE-2016-4082 | 5.9 | Apr 25 | epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +8 more |
| CVE-2016-4081 | 5.9 | Apr 25 | epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an incorrect integer data type, which allows remote attackers to… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +8 more |
| CVE-2016-4080 | 5.9 | Apr 25 | epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +8 more |
| CVE-2016-4079 | 5.9 | Apr 25 | epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +8 more |
| CVE-2016-4078 | 5.9 | Apr 25 | The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +8 more |
| CVE-2016-4077 | 5.9 | Apr 25 | epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case handling of truncated Tvb data structures, which allows remote attackers to cause a… Affected: 2.0.0; 2.0.1; 2.0.2 |
| CVE-2016-4076 | 5.9 | Apr 25 | epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to… Affected: 2.0.0; 2.0.1; 2.0.2 |
| CVE-2016-4006 | 5.9 | Apr 25 | epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause a denial of service (stack… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +8 more |
| CVE-2016-2532 | 5.9 | Feb 28 | The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +6 more |
| CVE-2016-2531 | 5.9 | Feb 28 | Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +6 more |
| CVE-2016-2530 | 5.9 | Feb 28 | The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +6 more |
| CVE-2016-2528 | 5.9 | Feb 28 | The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote… Affected: 2.0.0; 2.0.1 |
| CVE-2016-2526 | 5.9 | Feb 28 | epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of service… Affected: 2.0.0; 2.0.1 |
| CVE-2016-2525 | 5.9 | Feb 28 | epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of… Affected: 2.0.0; 2.0.1 |
| CVE-2016-2524 | 5.9 | Feb 28 | epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to cause a denial of service… Affected: 2.0.0; 2.0.1 |
| CVE-2016-2523 | 5.9 | Feb 28 | The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +6 more |
| CVE-2016-2522 | 5.9 | Feb 28 | The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is… Affected: 2.0.0; 2.0.1 |
| CVE-2026-95391 | 5.5 | Sep 29 | Use After Free in Wireshark Affected: 4.6.0 before 4.6.9 |
| CVE-2026-95386 | 5.5 | Sep 29 | Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark Affected: 4.6.0 before 4.6.9 |
| CVE-2026-95390 | 5.5 | Sep 29 | NULL Pointer Dereference in Wireshark Affected: 4.6.0 before 4.6.9 |
| CVE-2026-95395 | 5.5 | Sep 29 | Missing Release of Memory after Effective Lifetime in Wireshark Affected: 4.4.0 before 4.4.19; 4.6.0 before 4.6.9 |
The 500 most important CVEs for this product (exploited first, then by severity)