The Wireshark Foundation vulnerabilities
11 vulnerabilities
Known vulnerabilities in The Wireshark Foundation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Wireshark11 vulnerabilities
CVE-2021-22235debianwireshark+11
EPSS score3.43%
Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture fileCVE-2021-22173debianwireshark+5EPSS score2.41%
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture fileCVE-2021-22191debianwireshark+6EPSS score3.67%
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.CVE-2021-22174debianwireshark+5EPSS score2.75%
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture fileCVE-2021-22207debianwireshark+7EPSS score2.02%
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture fileCVE-2021-22222debianwireshark+8EPSS score1.91%
Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture fileCVE-2020-26422ubuntuwireshark+3EPSS score4.72%
Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture fileCVE-2020-26420debianwireshark+5EPSS score2.75%
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.CVE-2020-26421debianwireshark+6EPSS score2.55%
Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.CVE-2020-26418debianwireshark+6EPSS score3.00%
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.CVE-2020-26419debianwireshark+4EPSS score2.93%
Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.