The Wireshark Foundation vulnerabilities

11 vulnerabilities

Known vulnerabilities in The Wireshark Foundation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
7.5CVE-2021-22235debianwireshark+11
EPSS score
3.43%
Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file
7.5CVE-2021-22173debianwireshark+5
EPSS score
2.41%
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
8.8CVE-2021-22191debianwireshark+6
EPSS score
3.67%
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
7.5CVE-2021-22174debianwireshark+5
EPSS score
2.75%
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
6.5CVE-2021-22207debianwireshark+7
EPSS score
2.02%
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
7.5CVE-2021-22222debianwireshark+8
EPSS score
1.91%
Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file
5.3CVE-2020-26422ubuntuwireshark+3
EPSS score
4.72%
Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file
5.3CVE-2020-26420debianwireshark+5
EPSS score
2.75%
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
5.3CVE-2020-26421debianwireshark+6
EPSS score
2.55%
Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
5.3CVE-2020-26418debianwireshark+6
EPSS score
3.00%
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
5.3CVE-2020-26419debianwireshark+4
EPSS score
2.93%
Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.