Vulnerabilities > Wireshark
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-01-26 | CVE-2023-0411 | Excessive Iteration vulnerability in Wireshark Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | 6.5 |
2023-01-26 | CVE-2023-0412 | Improper Resource Shutdown or Release vulnerability in multiple products TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | 7.1 |
2023-01-26 | CVE-2023-0413 | Improper Resource Shutdown or Release vulnerability in Wireshark Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | 6.5 |
2023-01-26 | CVE-2023-0414 | Improper Resource Shutdown or Release vulnerability in Wireshark 4.0.0/4.0.1 Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file | 6.5 |
2023-01-26 | CVE-2023-0415 | Improper Resource Shutdown or Release vulnerability in Wireshark iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | 6.5 |
2023-01-26 | CVE-2023-0416 | Improper Resource Shutdown or Release vulnerability in Wireshark GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | 6.5 |
2023-01-26 | CVE-2023-0417 | Improper Resource Shutdown or Release vulnerability in Wireshark Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | 6.5 |
2023-01-12 | CVE-2022-4345 | Infinite Loop vulnerability in Wireshark Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file | 6.5 |
2023-01-12 | CVE-2022-4344 | Resource Exhaustion vulnerability in Wireshark Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file | 4.3 |
2022-12-09 | CVE-2022-3724 | Use of Externally-Controlled Format String vulnerability in Wireshark Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows | 7.5 |