Wireshark Foundation Wireshark vulnerabilities, page 2

185 vulnerabilities

Known vulnerabilities in Wireshark Foundation Wireshark, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2025-1492debianwireshark+13
EPSS score
0.30%
Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file5.5CVE-2025-11626debianwireshark+9
EPSS score
0.12%
MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service7.8CVE-2025-9817debianwireshark+15
EPSS score
0.21%
SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service7.8CVE-2025-5601debianwireshark+10
EPSS score
0.31%
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file6.5CVE-2022-0585debianwireshark+5
EPSS score
2.39%
Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file7.5CVE-2022-0581debianwireshark+5
EPSS score
1.79%
Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file7.8CVE-2022-0586debianwireshark+5
EPSS score
2.00%
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file7.5CVE-2022-0583debianwireshark+5
EPSS score
1.79%
Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file9.8CVE-2022-0582debianwireshark+5
EPSS score
1.99%
Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file6.5CVE-2022-4345debianwireshark+3
EPSS score
0.68%
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file6.3CVE-2022-4344debianwireshark+3
EPSS score
0.57%
Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file7.5CVE-2022-3725debianwireshark+29
EPSS score
0.86%
Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file7.5CVE-2022-3724ubuntuwireshark+2
EPSS score
2.54%
Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows7.8CVE-2024-2955debianwireshark+6
EPSS score
1.40%
T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file7.8CVE-2024-11595debianwireshark+3
EPSS score
0.27%
FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file7.8CVE-2024-11596debianwireshark+3
EPSS score
0.30%
ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file7.8CVE-2024-0211debianwireshark+3
EPSS score
0.54%
DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file7.8CVE-2024-0210debianwireshark+3
EPSS score
0.47%
Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file7.8CVE-2024-0208debianwireshark+3
EPSS score
1.84%
GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file7.8CVE-2024-0207debianwireshark+3
EPSS score
0.47%
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file