rpm package
opensuse/wireshark&distro=openSUSE Leap 15.5
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.5
Vulnerabilities (22)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-8250 | — | < 3.6.24-150000.3.118.1 | 3.6.24-150000.3.118.1 | Aug 28, 2024 | NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file | ||
| CVE-2024-4855 | — | < 3.6.23-150000.3.115.1 | 3.6.23-150000.3.115.1 | May 14, 2024 | Use after free issue in editcap could cause denial of service via crafted capture file | ||
| CVE-2024-4854 | — | < 3.6.23-150000.3.115.1 | 3.6.23-150000.3.115.1 | May 14, 2024 | MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file | ||
| CVE-2024-4853 | — | < 3.6.23-150000.3.115.1 | 3.6.23-150000.3.115.1 | May 14, 2024 | Memory handling issue in editcap could cause denial of service via crafted capture file | ||
| CVE-2023-6175 | — | < 3.6.19-150000.3.106.1 | 3.6.19-150000.3.106.1 | Mar 26, 2024 | NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file | ||
| CVE-2024-24476 | — | < 3.6.22-150000.3.112.1 | 3.6.22-150000.3.112.1 | Feb 21, 2024 | A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected. | ||
| CVE-2024-0209 | — | < 3.6.20-150000.3.109.1 | 3.6.20-150000.3.109.1 | Jan 3, 2024 | IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file | ||
| CVE-2024-0208 | — | < 3.6.20-150000.3.109.1 | 3.6.20-150000.3.109.1 | Jan 3, 2024 | GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-2906 | — | < 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 | Aug 25, 2023 | Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. | ||
| CVE-2023-4513 | — | < 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 | Aug 24, 2023 | BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-4512 | — | < 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 | Aug 24, 2023 | CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-4511 | — | < 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 | Aug 24, 2023 | BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-3648 | — | < 3.6.15-150000.3.97.1 | 3.6.15-150000.3.97.1 | Jul 14, 2023 | Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-0667 | — | < 3.6.15-150000.3.97.1 | 3.6.15-150000.3.97.1 | Jun 7, 2023 | Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark | ||
| CVE-2023-0668 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | Jun 7, 2023 | Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark. | ||
| CVE-2023-2952 | — | < 3.6.15-150000.3.97.1 | 3.6.15-150000.3.97.1 | May 30, 2023 | XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-2879 | — | < 3.6.15-150000.3.97.1 | 3.6.15-150000.3.97.1 | May 26, 2023 | GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-2858 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | May 26, 2023 | NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||
| CVE-2023-2857 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | May 26, 2023 | BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||
| CVE-2023-2856 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | May 26, 2023 | VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file |
- CVE-2024-8250Aug 28, 2024affected < 3.6.24-150000.3.118.1fixed 3.6.24-150000.3.118.1
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file
- CVE-2024-4855May 14, 2024affected < 3.6.23-150000.3.115.1fixed 3.6.23-150000.3.115.1
Use after free issue in editcap could cause denial of service via crafted capture file
- CVE-2024-4854May 14, 2024affected < 3.6.23-150000.3.115.1fixed 3.6.23-150000.3.115.1
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file
- CVE-2024-4853May 14, 2024affected < 3.6.23-150000.3.115.1fixed 3.6.23-150000.3.115.1
Memory handling issue in editcap could cause denial of service via crafted capture file
- CVE-2023-6175Mar 26, 2024affected < 3.6.19-150000.3.106.1fixed 3.6.19-150000.3.106.1
NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file
- CVE-2024-24476Feb 21, 2024affected < 3.6.22-150000.3.112.1fixed 3.6.22-150000.3.112.1
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
- CVE-2024-0209Jan 3, 2024affected < 3.6.20-150000.3.109.1fixed 3.6.20-150000.3.109.1
IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
- CVE-2024-0208Jan 3, 2024affected < 3.6.20-150000.3.109.1fixed 3.6.20-150000.3.109.1
GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
- CVE-2023-2906Aug 25, 2023affected < 3.6.16-150000.3.100.1fixed 3.6.16-150000.3.100.1
Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
- CVE-2023-4513Aug 24, 2023affected < 3.6.16-150000.3.100.1fixed 3.6.16-150000.3.100.1
BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
- CVE-2023-4512Aug 24, 2023affected < 3.6.16-150000.3.100.1fixed 3.6.16-150000.3.100.1
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
- CVE-2023-4511Aug 24, 2023affected < 3.6.16-150000.3.100.1fixed 3.6.16-150000.3.100.1
BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
- CVE-2023-3648Jul 14, 2023affected < 3.6.15-150000.3.97.1fixed 3.6.15-150000.3.97.1
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
- CVE-2023-0667Jun 7, 2023affected < 3.6.15-150000.3.97.1fixed 3.6.15-150000.3.97.1
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark
- CVE-2023-0668Jun 7, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
- CVE-2023-2952May 30, 2023affected < 3.6.15-150000.3.97.1fixed 3.6.15-150000.3.97.1
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
- CVE-2023-2879May 26, 2023affected < 3.6.15-150000.3.97.1fixed 3.6.15-150000.3.97.1
GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
- CVE-2023-2858May 26, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- CVE-2023-2857May 26, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- CVE-2023-2856May 26, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Page 1 of 2