rpm package
opensuse/wireshark&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed
Vulnerabilities (581)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-11595 | Hig | 7.8 | < 4.4.2-2.1 | 4.4.2-2.1 | Nov 21, 2024 | FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-9781 | Hig | 7.8 | < 4.4.1-1.1 | 4.4.1-1.1 | Oct 10, 2024 | AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-9780 | Hig | 7.8 | < 4.4.1-1.1 | 4.4.1-1.1 | Oct 10, 2024 | ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-8645 | Med | 5.5 | < 4.4.0-2.1 | 4.4.0-2.1 | Sep 10, 2024 | SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-8250 | Hig | 7.8 | < 4.2.7-1.1 | 4.2.7-1.1 | Aug 29, 2024 | NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-4855 | Low | 3.6 | < 4.2.5-1.1 | 4.2.5-1.1 | May 14, 2024 | Use after free issue in editcap could cause denial of service via crafted capture file | |
| CVE-2024-4854 | Med | 6.4 | < 4.2.5-1.1 | 4.2.5-1.1 | May 14, 2024 | MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file | |
| CVE-2024-4853 | Low | 3.6 | < 4.2.5-1.1 | 4.2.5-1.1 | May 14, 2024 | Memory handling issue in editcap could cause denial of service via crafted capture file | |
| CVE-2024-2955 | Hig | 7.8 | < 4.2.4-1.1 | 4.2.4-1.1 | Mar 26, 2024 | T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file | |
| CVE-2023-6175 | Hig | 7.8 | < 4.0.11-2.1 | 4.0.11-2.1 | Mar 26, 2024 | NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file | |
| CVE-2024-24476 | Hig | 7.5 | < 4.2.6-3.1 | 4.2.6-3.1 | Feb 21, 2024 | A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected. | |
| CVE-2024-0211 | Hig | 7.8 | < 4.2.1-1.1 | 4.2.1-1.1 | Jan 3, 2024 | DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-0210 | Hig | 7.8 | < 4.2.1-1.1 | 4.2.1-1.1 | Jan 3, 2024 | Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-0209 | Hig | 7.8 | < 4.2.1-1.1 | 4.2.1-1.1 | Jan 3, 2024 | IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-0208 | Hig | 7.8 | < 4.2.1-1.1 | 4.2.1-1.1 | Jan 3, 2024 | GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-0207 | Hig | 7.8 | < 4.2.1-1.1 | 4.2.1-1.1 | Jan 3, 2024 | HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file | |
| CVE-2023-6174 | Med | 6.3 | < 4.0.11-2.1 | 4.0.11-2.1 | Nov 16, 2023 | SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file | |
| CVE-2023-5371 | Med | 5.3 | < 4.0.10-1.1 | 4.0.10-1.1 | Oct 4, 2023 | RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file | |
| CVE-2023-2906 | Med | 6.5 | < 4.0.8-2.1 | 4.0.8-2.1 | Aug 25, 2023 | Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. | |
| CVE-2023-4513 | Med | 5.3 | < 4.0.8-2.1 | 4.0.8-2.1 | Aug 24, 2023 | BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file |
- affected < 4.4.2-2.1fixed 4.4.2-2.1
FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
- affected < 4.4.1-1.1fixed 4.4.1-1.1
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- affected < 4.4.1-1.1fixed 4.4.1-1.1
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
- affected < 4.4.0-2.1fixed 4.4.0-2.1
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- affected < 4.2.7-1.1fixed 4.2.7-1.1
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file
- affected < 4.2.5-1.1fixed 4.2.5-1.1
Use after free issue in editcap could cause denial of service via crafted capture file
- affected < 4.2.5-1.1fixed 4.2.5-1.1
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file
- affected < 4.2.5-1.1fixed 4.2.5-1.1
Memory handling issue in editcap could cause denial of service via crafted capture file
- affected < 4.2.4-1.1fixed 4.2.4-1.1
T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file
- affected < 4.0.11-2.1fixed 4.0.11-2.1
NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file
- affected < 4.2.6-3.1fixed 4.2.6-3.1
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
- affected < 4.2.1-1.1fixed 4.2.1-1.1
DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
- affected < 4.2.1-1.1fixed 4.2.1-1.1
Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
- affected < 4.2.1-1.1fixed 4.2.1-1.1
IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
- affected < 4.2.1-1.1fixed 4.2.1-1.1
GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
- affected < 4.2.1-1.1fixed 4.2.1-1.1
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
- affected < 4.0.11-2.1fixed 4.0.11-2.1
SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file
- affected < 4.0.10-1.1fixed 4.0.10-1.1
RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
- affected < 4.0.8-2.1fixed 4.0.8-2.1
Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
- affected < 4.0.8-2.1fixed 4.0.8-2.1
BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
Page 6 of 30