Threat Intelligence Database

A vulnerability in the BLF file parser of Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 allows possible information disclosure. The issue affects multiple Ubuntu package versions of Wireshark. The vulnerability requires local access with high attack complexity and user interaction, resulting in limited confidentiality impact without affecting integrity or availability.

Multiple protocol dissectors in Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 contain infinite loop vulnerabilities that can be triggered to cause denial of service. This affects various Ubuntu package versions of Wireshark. The vulnerability allows an attacker to cause the application to hang or crash, resulting in service disruption.

A denial of service vulnerability exists in the ciscodump dissector of Wireshark versions 1.10.2-1 through 4.6.4-1. This vulnerability causes a crash when processing certain inputs, leading to denial of service. The issue affects multiple Ubuntu package versions of Wireshark across various LTS releases. No known exploits are reported in the wild.

A vulnerability in Wireshark versions 4.6.0 through 4.6.6 causes a crash in the TLS ECH decryptor, leading to a denial of service condition. This issue allows an attacker to disrupt the normal operation of Wireshark by triggering the crash. The vulnerability affects multiple Ubuntu package versions of Wireshark. There are no known exploits in the wild at this time.

A vulnerability in the IEEE 802.11 protocol dissector of Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 can cause the application to crash, resulting in a denial of service condition. This affects multiple Ubuntu package versions of Wireshark. The vulnerability requires local access with low privileges and user interaction to be exploited.

A denial of service vulnerability exists in Wireshark's DBS Etherwatch file parser affecting versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16. This flaw can cause the application to crash when processing crafted files.

A vulnerability in Wireshark's UMTS FP protocol dissector in versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 can cause the application to crash, resulting in a denial of service condition.

A vulnerability in the Z39.50 protocol dissector of Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 can cause the application to crash, resulting in a denial of service condition.

A vulnerability in Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 causes the SSH protocol dissector to crash, resulting in a denial of service condition. This affects multiple Ubuntu package versions of Wireshark. The vulnerability requires user interaction and local access to the system. No known exploits are reported in the wild.

A vulnerability in the FMP/NOTIFY protocol dissector in Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 can cause the application to crash, resulting in a denial of service condition.