WI
Product
Wireshark
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 237Medium 233Low 1
Watch
Add Wireshark to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6869 | 5.5 | Apr 30 | Improperly Controlled Sequential Memory Allocation in Wireshark Affected: 4.4.0 through 4.4.14; 4.6.0 through 4.6.4 |
| CVE-2026-6867 | 5.5 | Apr 30 | Improperly Controlled Sequential Memory Allocation in Wireshark Affected: 4.4.0 through 4.4.14; 4.6.0 through 4.6.4 |
| CVE-2026-0960 | 5.5 | Jan 14 | Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark Affected: 4.4.0 before 4.4.13; 4.6.0 before 4.6.3 |
| CVE-2025-13946 | 5.5 | Dec 3 | Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark Affected: 4.4.0 before 4.4.12; 4.6.0 before 4.6.2 |
| CVE-2025-13945 | 5.5 | Dec 3 | Improperly Controlled Sequential Memory Allocation in Wireshark Affected: 4.6.0 before 4.6.2 |
| CVE-2025-13674 | 5.5 | Nov 26 | Access of Uninitialized Pointer in Wireshark Affected: 4.6.0 |
| CVE-2025-13499 | 5.5 | Nov 21 | Access of Uninitialized Pointer in Wireshark Affected: 4.4.0 before 4.4.11; 4.6.0 |
| CVE-2025-11626 | 5.5 | Oct 10 | Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark Affected: 4.2.0 before 4.2.14; 4.4.0 before 4.4.10 |
| CVE-2024-11596 | 5.5 | Nov 21 | ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file Affected: 4.2.0 before 4.2.9; 4.4.0 before 4.4.2 |
| CVE-2024-11595 | 5.5 | Nov 21 | FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file Affected: 4.2.0 before 4.2.9; 4.4.0 before 4.4.2 |
| CVE-2024-9780 | 5.5 | Oct 10 | ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file Affected: 4.4.0 |
| CVE-2024-8645 | 5.5 | Sep 10 | Access of Uninitialized Pointer in Wireshark Affected: 4.0.0 before 4.0.16; 4.2.0 before 4.2.6 |
| CVE-2024-8250 | 5.5 | Aug 29 | NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file Affected: 4.0.0 before 4.0.17; 4.2.0 before 4.2.7 |
| CVE-2024-4855 | 5.5 | May 14 | Use after free issue in editcap could cause denial of service via crafted capture file Affected: 3.6.0 before 3.6.23; 4.0.0 before 4.0.15; 4.2.0 before 4.2.5 |
| CVE-2024-4853 | 5.5 | May 14 | Memory handling issue in editcap could cause denial of service via crafted capture file Affected: 3.6.0 before 3.6.23; 4.0.0 before 4.0.15; 4.2.0 before 4.2.5 |
| CVE-2023-3649 | 5.5 | Jul 14 | iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file Affected: 4.0.0 through 4.0.6 |
| CVE-2023-3648 | 5.5 | Jul 14 | Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file Affected: 3.6.0 through 3.6.14; 4.0.0 through 4.0.6 |
| CVE-2022-3190 | 5.5 | Sep 13 | Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file Affected: 3.4.0 before 3.4.16; 3.6.0 before 3.6.8 |
| CVE-2021-4183 | 5.5 | Dec 30 | Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file Affected: 3.6.0 |
| CVE-2019-9209 | 5.5 | Feb 28 | In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash Affected: 2.4.0 through 2.4.12; 2.6.0 through 2.6.6 |
| CVE-2019-5721 | 5.5 | Jan 8 | In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash Affected: 2.4.0 through 2.4.11 |
| CVE-2019-5719 | 5.5 | Jan 8 | In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash Affected: 2.4.0 through 2.4.11; 2.6.0 through 2.6.5 |
| CVE-2019-5718 | 5.5 | Jan 8 | In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash Affected: 2.4.0 through 2.4.11; 2.6.0 through 2.6.5 |
| CVE-2019-5717 | 5.5 | Jan 8 | In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash Affected: 2.4.0 through 2.4.11; 2.6.0 through 2.6.5 |
| CVE-2019-5716 | 5.5 | Jan 8 | In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash Affected: 2.6.0 through 2.6.5 |
| CVE-2018-19626 | 5.5 | Nov 29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash Affected: 2.4.0 through 2.4.10; 2.6.0 through 2.6.4 |
| CVE-2018-19625 | 5.5 | Nov 29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash Affected: 2.4.0 through 2.4.10; 2.6.0 through 2.6.4 |
| CVE-2018-19624 | 5.5 | Nov 29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash Affected: 2.4.0 through 2.4.10; 2.6.0 through 2.6.4 |
| CVE-2017-9617 | 5.5 | Jun 14 | In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP… Affected: 2.2.7 |
| CVE-2017-9616 | 5.5 | Jun 14 | In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/file-mp4.c Affected: 2.2.7 |
| CVE-2016-2529 | 5.5 | Feb 28 | The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL"… Affected: 2.0.0; 2.0.1 |
| CVE-2016-2527 | 5.5 | Feb 28 | wiretap/nettrace_3gpp_32_423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain… Affected: 2.0.0; 2.0.1 |
| CVE-2015-8742 | 5.5 | Jan 4 | The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows… Affected: 2.0.0 |
| CVE-2015-8741 | 5.5 | Jan 4 | The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows… Affected: 2.0.0 |
| CVE-2015-8739 | 5.5 | Jan 4 | The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows… Affected: 2.0.0 |
| CVE-2015-8738 | 5.5 | Jan 4 | The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count… Affected: 2.0.0 |
| CVE-2015-8737 | 5.5 | Jan 4 | The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of… Affected: 2.0.0 |
| CVE-2015-8736 | 5.5 | Jan 4 | The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to… Affected: 2.0.0 |
| CVE-2015-8735 | 5.5 | Jan 4 | The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type,… Affected: 2.0.0 |
| CVE-2015-8734 | 5.5 | Jan 4 | The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a… Affected: 2.0.0 |
| CVE-2015-8733 | 5.5 | Jan 4 | The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8732 | 5.5 | Jan 4 | The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8731 | 5.5 | Jan 4 | The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8730 | 5.5 | Jan 4 | epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8729 | 5.5 | Jan 4 | The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\0'… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8728 | 5.5 | Jan 4 | The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A dissector in Wireshark 1.12.x… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8727 | 5.5 | Jan 4 | The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8726 | 5.5 | Jan 4 | wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data,… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8725 | 5.5 | Jan 4 | The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
| CVE-2015-8724 | 5.5 | Jan 4 | The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA… Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more |
The 500 most important CVEs for this product (exploited first, then by severity)