Vulnerabilities > Wireshark

DATE CVE VULNERABILITY TITLE RISK
2024-10-10 CVE-2024-9780 Missing Initialization of Resource vulnerability in Wireshark 4.4.0
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
local
low complexity
wireshark CWE-909
5.5
2024-10-10 CVE-2024-9781 Unspecified vulnerability in Wireshark 4.2.0/4.4.0
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark
7.5
2024-08-29 CVE-2024-8250 Out-of-bounds Write vulnerability in Wireshark
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file
local
low complexity
wireshark CWE-787
5.5
2024-01-03 CVE-2024-0207 Out-of-bounds Read vulnerability in Wireshark 4.2.0
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark CWE-125
7.5
2024-01-03 CVE-2024-0208 Unspecified vulnerability in Wireshark
GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark
7.5
2024-01-03 CVE-2024-0209 NULL Pointer Dereference vulnerability in Wireshark
IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark CWE-476
7.5
2024-01-03 CVE-2024-0210 Uncontrolled Recursion vulnerability in Wireshark 4.2.0
Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark CWE-674
7.5
2024-01-03 CVE-2024-0211 Infinite Loop vulnerability in Wireshark 4.2.0
DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark CWE-835
7.5
2023-11-16 CVE-2023-6174 Injection vulnerability in multiple products
SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark debian CWE-74
6.5
2023-10-04 CVE-2023-5371 Allocation of Resources Without Limits or Throttling vulnerability in Wireshark
RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark CWE-770
6.5