WI
Product
Wireshark
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 237Medium 233Low 1
Watch
Add Wireshark to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-9257 | 7.5 | Apr 4 | In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop Affected: 2.4.0 through 2.4.5 |
| CVE-2018-9256 | 7.5 | Apr 4 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5 |
| CVE-2018-7421 | 7.5 | Feb 23 | In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7420 | 7.5 | Feb 23 | In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7419 | 7.5 | Feb 23 | In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7418 | 7.5 | Feb 23 | In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7417 | 7.5 | Feb 23 | In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7337 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash Affected: 2.4.0 through 2.4.4 |
| CVE-2018-7336 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7335 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7334 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7333 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7332 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a length Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7331 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7330 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a correct integer data type Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7329 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed by correcting off-by-one errors Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7328 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short frame header lengths Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7327 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addressed by validating property lengths Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7326 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addressed by using a correct integer data type Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7325 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an infinite loop that was addressed by validating a length field Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7324 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addressed by using a correct integer data type Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7323 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically… Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7322 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that was addressed by checking for integer wraparound Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7321 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an… Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-7320 | 7.5 | Feb 23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash Affected: 2.2.0 through 2.2.12; 2.4.0 through 2.4.4 |
| CVE-2018-5336 | 7.5 | Jan 11 | In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash Affected: 2.2.0 through 2.2.11; 2.4.0 through 2.4.3 |
| CVE-2017-17997 | 7.5 | Dec 30 | In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes Affected: through 2.2.11 |
| CVE-2017-17935 | 7.5 | Dec 27 | The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of… Affected: through 2.2.11 |
| CVE-2017-17085 | 7.5 | Dec 1 | In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +8 more |
| CVE-2017-17084 | 7.5 | Dec 1 | In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +8 more |
| CVE-2017-17083 | 7.5 | Dec 1 | In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +8 more |
| CVE-2017-15193 | 7.5 | Oct 10 | In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +6 more |
| CVE-2017-15192 | 7.5 | Oct 10 | In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +6 more |
| CVE-2017-15191 | 7.5 | Oct 10 | In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash Affected: 2.0.0 through 2.0.15; 2.2.0 through 2.2.9; 2.4.0 through 2.4.1 |
| CVE-2017-15190 | 7.5 | Oct 10 | In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash Affected: 2.4.0; 2.4.1 |
| CVE-2017-15189 | 7.5 | Oct 10 | In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop Affected: 2.4.0; 2.4.1 |
| CVE-2017-13767 | 7.5 | Aug 30 | In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +17 more |
| CVE-2017-13766 | 7.5 | Aug 30 | In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +17 more |
| CVE-2017-13765 | 7.5 | Aug 30 | In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash Affected: 2.0.0 through 2.0.14; 2.2.0 through 2.2.8; 2.4.0 |
| CVE-2017-13764 | 7.5 | Aug 30 | In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference Affected: 2.4.0 |
| CVE-2017-11411 | 7.5 | Jul 18 | In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +16 more |
| CVE-2017-11410 | 7.5 | Jul 18 | In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +16 more |
| CVE-2017-11409 | 7.5 | Jul 18 | In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop Affected: 2.0.0 through 2.0.13 |
| CVE-2017-11408 | 7.5 | Jul 18 | In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +16 more |
| CVE-2017-11407 | 7.5 | Jul 18 | In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash Affected: 2.0.0 through 2.0.13; 2.2.0 through 2.2.7 |
| CVE-2017-11406 | 7.5 | Jul 18 | In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop Affected: 2.0.0 through 2.0.13; 2.2.0 through 2.2.7 |
| CVE-2017-9766 | 7.5 | Jun 21 | In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion) in the dissect_IODWriteReq function in… Affected: 2.2.7 |
| CVE-2017-9354 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6 |
| CVE-2017-9353 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash Affected: 2.2.0 through 2.2.6 |
| CVE-2017-9352 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6 |
The 500 most important CVEs for this product (exploited first, then by severity)
