rpm package
opensuse/wireshark&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed
Vulnerabilities (553)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-0961 | Med | 5.5 | < 4.6.3-1.1 | 4.6.3-1.1 | Jan 14, 2026 | BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service | |
| CVE-2026-0960 | Med | 4.7 | < 4.6.3-1.1 | 4.6.3-1.1 | Jan 14, 2026 | HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service | |
| CVE-2026-0959 | Med | 5.3 | < 4.6.3-1.1 | 4.6.3-1.1 | Jan 14, 2026 | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service | |
| CVE-2025-13946 | Med | 5.5 | < 4.6.2-1.1 | 4.6.2-1.1 | Dec 3, 2025 | MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service | |
| CVE-2025-13945 | Med | 5.5 | < 4.6.2-1.1 | 4.6.2-1.1 | Dec 3, 2025 | HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service | |
| CVE-2025-13674 | Med | 5.5 | < 4.6.1-2.1 | 4.6.1-2.1 | Nov 26, 2025 | BPv7 dissector crash in Wireshark 4.6.0 allows denial of service | |
| CVE-2025-13499 | Hig | 7.8 | < 4.6.1-1.1 | 4.6.1-1.1 | Nov 21, 2025 | Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service | |
| CVE-2025-11626 | Med | 5.5 | < 4.4.10-2.1 | 4.4.10-2.1 | Oct 10, 2025 | MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service | |
| CVE-2025-9817 | Hig | 7.8 | < 4.4.9-2.1 | 4.4.9-2.1 | Sep 3, 2025 | SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service | |
| CVE-2025-5601 | Hig | 7.8 | < 4.4.7-1.1 | 4.4.7-1.1 | Jun 4, 2025 | Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file | |
| CVE-2025-1492 | Hig | 7.8 | < 4.4.4-2.1 | 4.4.4-2.1 | Feb 20, 2025 | Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-11596 | Hig | 7.8 | < 4.4.2-2.1 | 4.4.2-2.1 | Nov 21, 2024 | ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-11595 | Hig | 7.8 | < 4.4.2-2.1 | 4.4.2-2.1 | Nov 21, 2024 | FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-9781 | Hig | 7.8 | < 4.4.1-1.1 | 4.4.1-1.1 | Oct 10, 2024 | AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-9780 | Hig | 7.8 | < 4.4.1-1.1 | 4.4.1-1.1 | Oct 10, 2024 | ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-8645 | Med | 5.5 | < 4.4.0-2.1 | 4.4.0-2.1 | Sep 10, 2024 | SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-8250 | Hig | 7.8 | < 4.2.7-1.1 | 4.2.7-1.1 | Aug 29, 2024 | NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-4855 | Low | 3.6 | < 4.2.5-1.1 | 4.2.5-1.1 | May 14, 2024 | Use after free issue in editcap could cause denial of service via crafted capture file | |
| CVE-2024-4854 | Med | 6.4 | < 4.2.5-1.1 | 4.2.5-1.1 | May 14, 2024 | MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file | |
| CVE-2024-4853 | Low | 3.6 | < 4.2.5-1.1 | 4.2.5-1.1 | May 14, 2024 | Memory handling issue in editcap could cause denial of service via crafted capture file |
- affected < 4.6.3-1.1fixed 4.6.3-1.1
BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
- affected < 4.6.3-1.1fixed 4.6.3-1.1
HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service
- affected < 4.6.3-1.1fixed 4.6.3-1.1
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
- affected < 4.6.2-1.1fixed 4.6.2-1.1
MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service
- affected < 4.6.2-1.1fixed 4.6.2-1.1
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- affected < 4.6.1-2.1fixed 4.6.1-2.1
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service
- affected < 4.6.1-1.1fixed 4.6.1-1.1
Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service
- affected < 4.4.10-2.1fixed 4.4.10-2.1
MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service
- affected < 4.4.9-2.1fixed 4.4.9-2.1
SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service
- affected < 4.4.7-1.1fixed 4.4.7-1.1
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file
- affected < 4.4.4-2.1fixed 4.4.4-2.1
Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
- affected < 4.4.2-2.1fixed 4.4.2-2.1
ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
- affected < 4.4.2-2.1fixed 4.4.2-2.1
FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
- affected < 4.4.1-1.1fixed 4.4.1-1.1
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- affected < 4.4.1-1.1fixed 4.4.1-1.1
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
- affected < 4.4.0-2.1fixed 4.4.0-2.1
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- affected < 4.2.7-1.1fixed 4.2.7-1.1
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file
- affected < 4.2.5-1.1fixed 4.2.5-1.1
Use after free issue in editcap could cause denial of service via crafted capture file
- affected < 4.2.5-1.1fixed 4.2.5-1.1
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file
- affected < 4.2.5-1.1fixed 4.2.5-1.1
Memory handling issue in editcap could cause denial of service via crafted capture file
Page 4 of 28