WI
Product
Wireshark
by Wireshark · last CVE Sep 29, 2026
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 237Medium 233Low 1
Watch

Add Wireshark to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-9257
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop
Affected: 2.4.0 through 2.4.5
CVE-2018-9256
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-7421
7.5
2%
Feb 23
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7420
7.5
3%
Feb 23
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7419
7.5
3%
Feb 23
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7418
7.5
3%
Feb 23
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7417
7.5
3%
Feb 23
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7337
7.5
3%
Feb 23
In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash
Affected: 2.4.0 through 2.4.4
CVE-2018-7336
7.5
3%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7335
7.5
3%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7334
7.5
3%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7333
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7332
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a length
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7331
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7330
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a correct integer data type
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7329
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed by correcting off-by-one errors
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7328
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short frame header lengths
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7327
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addressed by validating property lengths
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7326
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addressed by using a correct integer data type
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7325
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an infinite loop that was addressed by validating a length field
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7324
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addressed by using a correct integer data type
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7323
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically…
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7322
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that was addressed by checking for integer wraparound
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7321
7.5
2%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an…
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-7320
7.5
3%
Feb 23
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash
Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4
CVE-2018-5336
7.5
3%
Jan 11
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash
Affected: 2.2.0 through 2.2.11; 2.4.0 through 2.4.3
CVE-2017-17997
7.5
2%
Dec 30
In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes
Affected: through 2.2.11
CVE-2017-17935
7.5
3%
Dec 27
The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of…
Affected: through 2.2.11
CVE-2017-17085
7.5
17%
Dec 1
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash
Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +8 more
CVE-2017-17084
7.5
3%
Dec 1
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash
Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +8 more
CVE-2017-17083
7.5
3%
Dec 1
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash
Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +8 more
CVE-2017-15193
7.5
3%
Oct 10
In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory
Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +6 more
CVE-2017-15192
7.5
2%
Oct 10
In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash
Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +6 more
CVE-2017-15191
7.5
3%
Oct 10
In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash
Affected: 2.0.0 through 2.0.15; 2.2.0 through 2.2.9; 2.4.0 through 2.4.1
CVE-2017-15190
7.5
2%
Oct 10
In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash
Affected: 2.4.0; 2.4.1
CVE-2017-15189
7.5
2%
Oct 10
In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop
Affected: 2.4.0; 2.4.1
CVE-2017-13767
7.5
2%
Aug 30
In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +17 more
CVE-2017-13766
7.5
2%
Aug 30
In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +17 more
CVE-2017-13765
7.5
3%
Aug 30
In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash
Affected: 2.0.0 through 2.0.14; 2.2.0 through 2.2.8; 2.4.0
CVE-2017-13764
7.5
1%
Aug 30
In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference
Affected: 2.4.0
CVE-2017-11411
7.5
1%
Jul 18
In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +16 more
CVE-2017-11410
7.5
1%
Jul 18
In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +16 more
CVE-2017-11409
7.5
2%
Jul 18
In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop
Affected: 2.0.0 through 2.0.13
CVE-2017-11408
7.5
2%
Jul 18
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +16 more
CVE-2017-11407
7.5
3%
Jul 18
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash
Affected: 2.0.0 through 2.0.13; 2.2.0 through 2.2.7
CVE-2017-11406
7.5
3%
Jul 18
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop
Affected: 2.0.0 through 2.0.13; 2.2.0 through 2.2.7
CVE-2017-9766
7.5
3%
Jun 21
In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion) in the dissect_IODWriteReq function in…
Affected: 2.2.7
CVE-2017-9354
7.5
3%
Jun 2
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash
Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6
CVE-2017-9353
7.5
14%
Jun 2
In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash
Affected: 2.2.0 through 2.2.6
CVE-2017-9352
7.5
3%
Jun 2
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop
Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6
Page 4 of 5 · 237 total
1…345
The 500 most important CVEs for this product (exploited first, then by severity)