p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости wireshark · Страница 7

За последние 30 дней в wireshark опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 756

  1. CVE-2023-5371

    Средний · CVSS 5.3EPSS 0,51%Есть исправление

    Memory Allocation with Excessive Size Value in Wireshark

    RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.10-1
    Опубликовано Обновлено
  2. CVE-2023-2906

    Средний · CVSS 6.5EPSS 2,79%Есть исправление

    Wireshark CP2179 divide by zero

    Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.

    • Обновитесь до 4.0.8-1
    Опубликовано Обновлено
  3. CVE-2023-4513

    Средний · CVSS 5.3EPSS 0,51%Есть исправление

    Missing Release of Memory after Effective Lifetime in Wireshark

    BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.8-1
    Опубликовано Обновлено
  4. CVE-2023-4512

    Средний · CVSS 5.3EPSS 0,51%Есть исправление

    Uncontrolled Recursion in Wireshark

    CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.8-1
    Опубликовано Обновлено
  5. CVE-2023-4511

    Средний · CVSS 5.3EPSS 0,46%Есть исправление

    Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

    BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.8-1
    Опубликовано Обновлено
  6. CVE-2023-3649

    Средний · CVSS 5.3EPSS 0,24%Есть исправление

    Buffer Over-read in Wireshark

    iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.7-1
  7. CVE-2023-3648

    Средний · CVSS 5.3EPSS 0,25%Есть исправление

    Mismatched Memory Management Routines in Wireshark

    Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.7-1
  8. CVE-2023-0667

    Средний · CVSS 6.5EPSS 2,01%Есть исправление

    Wireshark MSMMS parsing buffer overflow

    Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

    • Обновитесь до 4.0.6-1
  9. CVE-2023-0668

    Средний · CVSS 6.5EPSS 2,26%Есть исправление

    Wireshark IEEE-C37.118 parsing buffer overflow

    Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

    • Обновитесь до 4.0.6-1
  10. CVE-2023-0666

    Средний · CVSS 6.5EPSS 2,27%Есть исправление

    Wireshark RTPS Parsing Buffer Overflow

    Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

    • Обновитесь до 4.0.6-1
  11. CVE-2023-2952

    Средний · CVSS 5.3EPSS 1,09%Есть исправление

    CVE-2023-2952

    XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.6-1
  12. CVE-2023-2879

    Средний · CVSS 6.3EPSS 1,59%Есть исправление

    CVE-2023-2879

    GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.6-1
  13. CVE-2023-2856

    Средний · CVSS 5.3EPSS 1,79%Есть исправление

    CVE-2023-2856

    VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

    • Обновитесь до 4.0.6-1
  14. CVE-2023-1994

    Средний · CVSS 6.3EPSS 1%Есть исправление

    CVE-2023-1994

    GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.6-1
    Опубликовано Обновлено
  15. CVE-2023-1993

    Средний · CVSS 6.3EPSS 4,09%Есть исправление

    CVE-2023-1993

    LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.6-1
    Опубликовано Обновлено
  16. CVE-2023-1992

    Средний · CVSS 6.3EPSS 4,62%Есть исправление

    CVE-2023-1992

    RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

    • Обновитесь до 4.0.6-1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →