rpm package
suse/wireshark&distro=SUSE Linux Enterprise Server 15-LTSS
pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS
Vulnerabilities (80)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-3725 | Med | 6.3 | < 3.6.10-150000.3.78.1 | 3.6.10-150000.3.78.1 | Oct 27, 2022 | Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file | |
| CVE-2022-0585 | Med | 4.3 | < 3.6.2-3.71.1 | 3.6.2-3.71.1 | Feb 18, 2022 | Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file | |
| CVE-2022-0586 | Med | 6.3 | < 3.6.2-3.71.1 | 3.6.2-3.71.1 | Feb 14, 2022 | Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file | |
| CVE-2022-0583 | Med | 6.3 | < 3.6.2-3.71.1 | 3.6.2-3.71.1 | Feb 14, 2022 | Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file | |
| CVE-2022-0582 | Med | 6.3 | < 3.6.2-3.71.1 | 3.6.2-3.71.1 | Feb 14, 2022 | Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file | |
| CVE-2022-0581 | Med | 6.3 | < 3.6.2-3.71.1 | 3.6.2-3.71.1 | Feb 14, 2022 | Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file | |
| CVE-2021-4190 | Hig | 7.5 | < 3.6.1-3.68.1 | 3.6.1-3.68.1 | Dec 30, 2021 | Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file | |
| CVE-2021-4185 | Hig | 7.5 | < 3.6.1-3.68.1 | 3.6.1-3.68.1 | Dec 30, 2021 | Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file | |
| CVE-2021-4184 | Hig | 7.5 | < 3.6.1-3.68.1 | 3.6.1-3.68.1 | Dec 30, 2021 | Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file | |
| CVE-2021-4183 | Med | 5.5 | < 3.6.1-3.68.1 | 3.6.1-3.68.1 | Dec 30, 2021 | Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file | |
| CVE-2021-4182 | Hig | 7.5 | < 3.6.1-3.68.1 | 3.6.1-3.68.1 | Dec 30, 2021 | Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file | |
| CVE-2021-4181 | Hig | 7.5 | < 3.6.1-3.68.1 | 3.6.1-3.68.1 | Dec 30, 2021 | Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file | |
| CVE-2021-22207 | Med | 5.5 | < 3.4.5-3.53.1 | 3.4.5-3.53.1 | Apr 23, 2021 | Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file | |
| CVE-2021-22191 | Med | 6.3 | < 3.4.5-3.53.1 | 3.4.5-3.53.1 | Mar 15, 2021 | Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file. | |
| CVE-2021-22174 | Low | 3.7 | < 3.4.5-3.53.1 | 3.4.5-3.53.1 | Feb 17, 2021 | Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file | |
| CVE-2021-22173 | Low | 3.7 | < 3.4.5-3.53.1 | 3.4.5-3.53.1 | Feb 17, 2021 | Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file | |
| CVE-2020-26422 | Low | 3.7 | < 3.4.5-3.53.1 | 3.4.5-3.53.1 | Dec 21, 2020 | Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file | |
| CVE-2020-26421 | Med | 4.2 | < 3.4.5-3.53.1 | 3.4.5-3.53.1 | Dec 11, 2020 | Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. | |
| CVE-2020-26420 | Low | 3.1 | < 3.4.5-3.53.1 | 3.4.5-3.53.1 | Dec 11, 2020 | Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. | |
| CVE-2020-26419 | Low | 3.1 | < 3.4.5-3.53.1 | 3.4.5-3.53.1 | Dec 11, 2020 | Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file. |
- affected < 3.6.10-150000.3.78.1fixed 3.6.10-150000.3.78.1
Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file
- affected < 3.6.2-3.71.1fixed 3.6.2-3.71.1
Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file
- affected < 3.6.2-3.71.1fixed 3.6.2-3.71.1
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- affected < 3.6.2-3.71.1fixed 3.6.2-3.71.1
Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- affected < 3.6.2-3.71.1fixed 3.6.2-3.71.1
Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- affected < 3.6.2-3.71.1fixed 3.6.2-3.71.1
Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- affected < 3.6.1-3.68.1fixed 3.6.1-3.68.1
Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file
- affected < 3.6.1-3.68.1fixed 3.6.1-3.68.1
Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
- affected < 3.6.1-3.68.1fixed 3.6.1-3.68.1
Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
- affected < 3.6.1-3.68.1fixed 3.6.1-3.68.1
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
- affected < 3.6.1-3.68.1fixed 3.6.1-3.68.1
Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
- affected < 3.6.1-3.68.1fixed 3.6.1-3.68.1
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
- affected < 3.4.5-3.53.1fixed 3.4.5-3.53.1
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- affected < 3.4.5-3.53.1fixed 3.4.5-3.53.1
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
- affected < 3.4.5-3.53.1fixed 3.4.5-3.53.1
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- affected < 3.4.5-3.53.1fixed 3.4.5-3.53.1
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- affected < 3.4.5-3.53.1fixed 3.4.5-3.53.1
Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file
- affected < 3.4.5-3.53.1fixed 3.4.5-3.53.1
Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- affected < 3.4.5-3.53.1fixed 3.4.5-3.53.1
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- affected < 3.4.5-3.53.1fixed 3.4.5-3.53.1
Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.
Page 1 of 4