Wireshark Foundation vulnerabilities and threats

158 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.8	EPSS 0.3%	CVE-2024-9781Wireshark · Improper Handling of Missing Values High7.8EPSS 0.3%2024-10-10CVE Database V5CVE-2024-9781 AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file EPSS 0.3%Vulnerability Wireshark Foundation CWE-230	CVE Database V5	2024-10-10
High	7.8	EPSS 0.2%	CVE-2024-9780Wireshark · Missing Initialization of a Variable High7.8EPSS 0.2%2024-10-10CVE Database V5CVE-2024-9780 ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file EPSS 0.2%Vulnerability Wireshark Foundation CWE-456	CVE Database V5	2024-10-10
Medium	5.5	EPSS 0.2%	CVE-2024-8645Wireshark · Access of Uninitialized Pointer Medium5.5EPSS 0.2%2024-09-10CVE Database V5CVE-2024-8645 SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file EPSS 0.2%Vulnerability Wireshark Foundation CWE-824	CVE Database V5	2024-09-10
High	7.8	EPSS 0.3%	CVE-2024-8250Wireshark · Expired Pointer Dereference High7.8EPSS 0.3%2024-08-28CVE Database V5CVE-2024-8250 NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file EPSS 0.3%Vulnerability Wireshark Foundation CWE-825	CVE Database V5	2024-08-28
Low	3.6	EPSS 0.4%	CVE-2024-4855Wireshark Foundation editcap · Use After Free Low3.6EPSS 0.4%2024-05-14CVE Database V5CVE-2024-4855 Use after free issue in editcap could cause denial of service via crafted capture file EPSS 0.4%Vulnerability CWE-416	CVE Database V5	2024-05-14
Medium	6.4	EPSS 0.8%	CVE-2024-4854Wireshark · Infinite Loop Medium6.4EPSS 0.8%2024-05-14CVE Database V5CVE-2024-4854 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file EPSS 0.8%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2024-05-14
Low	3.6	EPSS 0.4%	CVE-2024-4853Wireshark Foundation editcap · Mismatched Memory Management Routines Low3.6EPSS 0.4%2024-05-14CVE Database V5CVE-2024-4853 Memory handling issue in editcap could cause denial of service via crafted capture file EPSS 0.4%Vulnerability CWE-762	CVE Database V5	2024-05-14
High	7.8	EPSS 1.4%	CVE-2024-2955Wireshark · Mismatched Memory Management Routines High7.8EPSS 1.4%2024-03-26CVE Database V5CVE-2024-2955 T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file EPSS 1.4%Vulnerability Wireshark Foundation CWE-762	CVE Database V5	2024-03-26
High	7.8	EPSS 3.5%	CVE-2023-6175Wireshark · Classic Buffer Overflow High7.8EPSS 3.5%2024-03-26CVE Database V5CVE-2023-6175 NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file EPSS 3.5%Vulnerability Wireshark Foundation CWE-120	CVE Database V5	2024-03-26
High	7.8	EPSS 0.5%	CVE-2024-0211Wireshark · Infinite Loop High7.8EPSS 0.5%2024-01-03CVE Database V5CVE-2024-0211 DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file EPSS 0.5%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2024-01-03
High	7.8	EPSS 0.5%	CVE-2024-0210Wireshark · Uncontrolled Recursion High7.8EPSS 0.5%2024-01-03CVE Database V5CVE-2024-0210 Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file EPSS 0.5%Vulnerability Wireshark Foundation CWE-674	CVE Database V5	2024-01-03
High	7.8	EPSS 0.6%	CVE-2024-0209Wireshark · NULL Pointer Dereference High7.8EPSS 0.6%2024-01-03CVE Database V5CVE-2024-0209 IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file EPSS 0.6%Vulnerability Wireshark Foundation CWE-476	CVE Database V5	2024-01-03
High	7.8	EPSS 1.8%	CVE-2024-0208Wireshark · Improper Handling of Missing Values High7.8EPSS 1.8%2024-01-03CVE Database V5CVE-2024-0208 GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file EPSS 1.8%Vulnerability Wireshark Foundation CWE-230	CVE Database V5	2024-01-03
High	7.8	EPSS 0.5%	CVE-2024-0207Wireshark · Out-of-bounds Read High7.8EPSS 0.5%2024-01-03CVE Database V5CVE-2024-0207 HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file EPSS 0.5%Vulnerability Wireshark Foundation CWE-125	CVE Database V5	2024-01-03
Medium	–	EPSS 2.8%	CVE-2023-2906Wireshark · Divide By Zero MediumEPSS 2.8%2023-08-25CVE Database V5CVE-2023-2906 Wireshark versions 2.0.0 through 4.0.7 contain a divide-by-zero vulnerability due to improper validation of the length field in CP2179 packets. This flaw can be triggered by an attacker crafting a malicious packet, leading to a denial of service condition in the affected software. EPSS 2.8%Vulnerability Wireshark Foundation CWE-369	CVE Database V5	2023-08-25
Medium	5.3	EPSS 0.5%	CVE-2023-4513Wireshark · Memory Leak Medium5.3EPSS 0.5%2023-08-24CVE Database V5CVE-2023-4513 BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file EPSS 0.5%Vulnerability Wireshark Foundation CWE-401	CVE Database V5	2023-08-24
Medium	5.3	EPSS 0.5%	CVE-2023-4512Wireshark · Uncontrolled Recursion Medium5.3EPSS 0.5%2023-08-24CVE Database V5CVE-2023-4512 CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file EPSS 0.5%Vulnerability Wireshark Foundation CWE-674	CVE Database V5	2023-08-24
Medium	5.3	EPSS 0.5%	CVE-2023-4511Wireshark · Infinite Loop Medium5.3EPSS 0.5%2023-08-24CVE Database V5CVE-2023-4511 BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file EPSS 0.5%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2023-08-24
Medium	5.3	EPSS 0.2%	CVE-2023-3649Wireshark · Buffer Over-read Medium5.3EPSS 0.2%2023-07-14CVE Database V5CVE-2023-3649 iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file EPSS 0.2%Vulnerability Wireshark Foundation CWE-126	CVE Database V5	2023-07-14
Medium	5.3	EPSS 0.3%	CVE-2023-3648Wireshark · Mismatched Memory Management Routines Medium5.3EPSS 0.3%2023-07-14CVE Database V5CVE-2023-3648 Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file EPSS 0.3%Vulnerability Wireshark Foundation CWE-762	CVE Database V5	2023-07-14

Page 7 of 8