WI
Product
Wireshark
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 237Medium 233Low 1
Watch
Add Wireshark to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-9351 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6 |
| CVE-2017-9350 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6 |
| CVE-2017-9349 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6 |
| CVE-2017-9348 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer Affected: 2.2.0 through 2.2.6 |
| CVE-2017-9347 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference Affected: 2.2.0 through 2.2.6 |
| CVE-2017-9346 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6 |
| CVE-2017-9345 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6 |
| CVE-2017-9344 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6 |
| CVE-2017-9343 | 7.5 | Jun 2 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer Affected: 2.0.0 through 2.0.12; 2.2.0 through 2.2.6 |
| CVE-2017-7748 | 7.5 | Apr 12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +12 more |
| CVE-2017-7747 | 7.5 | Apr 12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +12 more |
| CVE-2017-7746 | 7.5 | Apr 12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +12 more |
| CVE-2017-7745 | 7.5 | Apr 12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +12 more |
| CVE-2017-7705 | 7.5 | Apr 12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +12 more |
| CVE-2017-7704 | 7.5 | Apr 12 | In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5 |
| CVE-2017-7703 | 7.5 | Apr 12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +12 more |
| CVE-2017-7702 | 7.5 | Apr 12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +12 more |
| CVE-2017-7701 | 7.5 | Apr 12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +12 more |
| CVE-2016-7958 | 7.5 | Apr 12 | In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file Affected: 2.2.0 |
| CVE-2016-7957 | 7.5 | Apr 12 | In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file Affected: 2.2.0 |
| CVE-2017-6474 | 7.5 | Mar 4 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file Affected: 2.0.0 through 2.0.10; 2.2.0 through 2.2.4 |
| CVE-2017-6473 | 7.5 | Mar 4 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file Affected: 2.0.0 through 2.0.10; 2.2.0 through 2.2.4 |
| CVE-2017-6472 | 7.5 | Mar 4 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0 through 2.0.10; 2.2.0 through 2.2.4 |
| CVE-2017-6471 | 7.5 | Mar 4 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0 through 2.0.10; 2.2.0 through 2.2.4 |
| CVE-2017-6470 | 7.5 | Mar 4 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0 through 2.0.10; 2.2.0 through 2.2.4 |
| CVE-2017-6469 | 7.5 | Mar 4 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file Affected: 2.0.0 through 2.0.10; 2.2.0 through 2.2.4 |
| CVE-2017-6468 | 7.5 | Mar 4 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file Affected: 2.0.0 through 2.0.10; 2.2.0 through 2.2.4 |
| CVE-2017-6467 | 7.5 | Mar 4 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file Affected: 2.0.0 through 2.0.10; 2.2.0 through 2.2.4 |
| CVE-2017-6014 | 7.5 | Feb 17 | In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion Affected: through 2.2.4 |
| CVE-2017-5597 | 7.5 | Jan 25 | In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +8 more |
| CVE-2017-5596 | 7.5 | Jan 25 | In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +8 more |
| CVE-2016-5350 | 7.5 | Aug 7 | epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +10 more |
| CVE-2011-1142 | 7.5 | Mar 3 | Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to… Affected: 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +15 more |
| CVE-2006-4574 | 7.5 | Oct 28 | Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain… Affected: 0.10.1 through 0.99.3 |
| CVE-2026-96423 | 7.1 | Sep 29 | Heap-based Buffer Overflow in Wireshark Affected: 4.4.0 before 4.4.19; 4.6.0 before 4.6.9 |
| CVE-2023-1161 | 7.1 | Mar 6 | ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file Affected: 3.6.0 before 3.6.12; 4.0.0 before 4.0.4 |
| CVE-2023-0412 | 7.1 | Jan 26 | TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2 |
The 500 most important CVEs for this product (exploited first, then by severity)