← Back

Wireshark

wireshark

748 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Wireshark
wireshark

CVEs (748)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Fedoraproject
Wireshark
2Fedora
Wireshark
Jun 17, 2026
Mar 26, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Mar 26, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file
2Fedoraproject
Wireshark
2Fedora
Wireshark
Jun 17, 2026
Feb 21, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither...Show more
A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.Show less
2Fedoraproject
Wireshark
2Fedora
Wireshark
Jun 17, 2026
Feb 21, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neithe...Show more
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.Show less
1Wireshark
1Wireshark
Jun 17, 2026
Feb 21, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed...Show more
An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.Show less
1Wireshark
1Wireshark
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
2Debian
Wireshark
2Debian Linux
Wireshark
Jun 17, 2026
Nov 16, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Oct 4, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Aug 25, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
1Wireshark
1Wireshark
Jun 17, 2026
Aug 24, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Aug 24, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Aug 24, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Jul 14, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
1Wireshark
1Wireshark
Jun 17, 2026
Jul 14, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
2Debian
Wireshark
2Debian Linux
Wireshark
Jun 17, 2026
Jun 7, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in t...Show more
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.Show less
1Wireshark
1Wireshark
Jun 17, 2026
Jun 7, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code exec...Show more
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running WiresharkShow less