p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости wireshark · Страница 7

За последние 30 дней в wireshark опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 186

  1. CVE-2024-8250

    Высокий · CVSS 7.8EPSS 0,32%Нет опубликованного исправления

    Expired Pointer Dereference in Wireshark

    NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

    Опубликовано Обновлено
  2. CVE-2024-4854

    Средний · CVSS 6.4EPSS 0,81%Нет опубликованного исправления

    Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

    MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

  3. CVE-2024-2955

    Высокий · CVSS 7.8EPSS 1,4%Нет опубликованного исправления

    Mismatched Memory Management Routines in Wireshark

    T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file

  4. CVE-2023-6175

    Высокий · CVSS 7.8EPSS 3,46%Нет опубликованного исправления

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

    NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file

  5. CVE-2024-0211

    Высокий · CVSS 7.8EPSS 0,54%Нет опубликованного исправления

    Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

    DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

  6. CVE-2024-0209

    Высокий · CVSS 7.8EPSS 0,58%Нет опубликованного исправления

    NULL Pointer Dereference in Wireshark

    IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

  7. CVE-2024-0208

    Высокий · CVSS 7.8EPSS 1,82%Нет опубликованного исправления

    Improper Handling of Missing Values in Wireshark

    GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

  8. CVE-2023-2906

    Средний · CVSS 6.5EPSS 2,79%Нет опубликованного исправления

    Wireshark CP2179 divide by zero

    Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.

    Опубликовано Обновлено
  9. CVE-2023-4513

    Средний · CVSS 5.3EPSS 0,51%Нет опубликованного исправления

    Missing Release of Memory after Effective Lifetime in Wireshark

    BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

    Опубликовано Обновлено
  10. CVE-2023-4511

    Средний · CVSS 5.3EPSS 0,46%Нет опубликованного исправления

    Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

    BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

    Опубликовано Обновлено
  11. CVE-2023-3649

    Средний · CVSS 5.3EPSS 0,24%Нет опубликованного исправления

    Buffer Over-read in Wireshark

    iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

  12. CVE-2023-3648

    Средний · CVSS 5.3EPSS 0,25%Нет опубликованного исправления

    Mismatched Memory Management Routines in Wireshark

    Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file

  13. CVE-2023-0667

    Средний · CVSS 6.5EPSS 2,01%Нет опубликованного исправления

    Wireshark MSMMS parsing buffer overflow

    Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

  14. CVE-2023-0668

    Средний · CVSS 6.5EPSS 2,26%Нет опубликованного исправления

    Wireshark IEEE-C37.118 parsing buffer overflow

    Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

  15. CVE-2023-0666

    Средний · CVSS 6.5EPSS 2,27%Нет опубликованного исправления

    Wireshark RTPS Parsing Buffer Overflow

    Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

  16. CVE-2023-2952

    Средний · CVSS 5.3EPSS 1,09%Нет опубликованного исправления

    CVE-2023-2952

    XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →