← Back

Wireshark

wireshark

Vendor: Wireshark • 748 CVEs

CVEs (748)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Wireshark
2Debian Linux
Wireshark
Jun 17, 2026
Nov 19, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
3Debian
FedoraprojectWireshark
3Debian Linux
FedoraWireshark
Jun 17, 2026
Nov 19, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
3Debian
FedoraprojectWireshark
3Debian Linux
FedoraWireshark
Jun 17, 2026
Nov 19, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
3Debian
FedoraprojectWireshark
3Debian Linux
FedoraWireshark
Jun 17, 2026
Nov 18, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
2Fedoraproject
Wireshark
2Fedora
Wireshark
Jun 17, 2026
Nov 18, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
2Debian
Wireshark
2Debian Linux
Wireshark
Jun 17, 2026
Jul 20, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file
3Debian
OracleWireshark
5Debian Linux
Enterprise Manager Ops CenterInstantis Enterprisetrack+2 more
Jun 17, 2026
Jun 7, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file
4Debian
FedoraprojectOracle+1 more
4Debian Linux
FedoraWireshark+1 more
Jun 17, 2026
Apr 23, 2021
N/A· v4
6.5 MEDIUM· v3
5.0 MEDIUM· v2
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
3Debian
OracleWireshark
3Debian Linux
WiresharkZfs Storage Appliance
Jun 17, 2026
Mar 15, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
3Fedoraproject
OracleWireshark
3Fedora
WiresharkZfs Storage Appliance
Jun 17, 2026
Feb 17, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
3Fedoraproject
OracleWireshark
3Fedora
WiresharkZfs Storage Appliance
Jun 17, 2026
Feb 17, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
2Oracle
Wireshark
2Wireshark
Zfs Storage Appliance Kit
Jun 17, 2026
Dec 21, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file
4Debian
FedoraprojectOracle+1 more
4Debian Linux
FedoraWireshark+1 more
Jun 17, 2026
Dec 11, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
3Fedoraproject
OracleWireshark
3Fedora
WiresharkZfs Storage Appliance Kit
Jun 17, 2026
Dec 11, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
3Fedoraproject
OracleWireshark
3Fedora
WiresharkZfs Storage Appliance Kit
Jun 17, 2026
Dec 11, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.
4Debian
FedoraprojectOracle+1 more
4Debian Linux
FedoraWireshark+1 more
Jun 17, 2026
Dec 11, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
3Debian
FedoraprojectWireshark
3Debian Linux
FedoraWireshark
Jun 17, 2026
Nov 2, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement.
4Debian
FedoraprojectOracle+1 more
4Debian Linux
FedoraWireshark+1 more
Jun 17, 2026
Oct 6, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.
4Fedoraproject
OpensuseOracle+1 more
4Fedora
LeapWireshark+1 more
Jun 17, 2026
Oct 6, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/pac...Show more
In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.Show less
5Debian
FedoraprojectOpensuse+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Oct 6, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts.