Vulnerabilities > Wireshark > Wireshark > 4.2.3

DATE CVE VULNERABILITY TITLE RISK
2025-02-20 CVE-2025-1492 Uncontrolled Recursion vulnerability in Wireshark
Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark CWE-674
7.5
2024-11-21 CVE-2024-11595 Unspecified vulnerability in Wireshark
FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
local
low complexity
wireshark
5.5
2024-11-21 CVE-2024-11596 Out-of-bounds Read vulnerability in Wireshark
ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
local
low complexity
wireshark CWE-125
5.5
2024-09-10 CVE-2024-8645 Access of Uninitialized Pointer vulnerability in Wireshark
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
local
low complexity
wireshark CWE-824
5.5
2024-05-14 CVE-2024-4854 Infinite Loop vulnerability in multiple products
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file
network
low complexity
fedoraproject wireshark CWE-835
7.5