CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Wireshark » Wireshark : Security Vulnerabilities (CVSS score between 4 and 5.99)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2006-3627 399 DoS 2006-07-21 2018-10-18
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors.
2 CVE-2006-3631 399 DoS 2006-07-21 2018-10-18
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
3 CVE-2006-4330 DoS 2006-08-24 2018-10-17
4.3
 None Remote Medium Not required None None Partial
Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors.
4 CVE-2006-4331 DoS 2006-08-24 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.
5 CVE-2006-4332 DoS 2006-08-24 2017-07-20
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the DHCP dissector in Wireshark (formerly Ethereal) 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service (crash) via unspecified vectors that trigger a bug in Glib.
6 CVE-2006-4333 399 DoS 2006-08-24 2018-10-17
5.4
 None Remote High Not required None None Complete
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.
7 CVE-2006-4574 DoS 2006-10-28 2018-10-17
5.0
 None Remote Low Not required None None Partial
Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.
8 CVE-2006-4805 DoS 2006-10-27 2018-10-17
5.0
 None Remote Low Not required None None Partial
epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service (memory consumption and crash) via an encoded XOT packet that produces a zero length value when it is decoded.
9 CVE-2006-5468 DoS 2006-10-27 2018-10-17
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors.
10 CVE-2006-5469 DoS 2006-10-28 2018-10-17
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the WBXML dissector in Wireshark (formerly Ethereal) 0.10.11 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger a null dereference.
11 CVE-2006-5595 2006-10-28 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the AirPcap support in Wireshark (formerly Ethereal) 0.99.3 has unspecified attack vectors related to WEP key parsing.
12 CVE-2006-5740 DoS 2006-10-27 2018-10-17
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via a crafted LDAP packet.
13 CVE-2007-0456 DoS 2007-02-02 2017-10-11
4.3
 None Remote Medium Not required None None Partial
Unspecified vulnerability in the LLT dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
14 CVE-2007-0457 DoS 2007-02-02 2017-10-11
4.3
 None Remote Medium Not required None None Partial
Unspecified vulnerability in the IEEE 802.11 dissector in Wireshark (formerly Ethereal) 0.10.14 through 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
15 CVE-2007-0458 DoS 2007-02-02 2017-10-11
4.3
 None Remote Medium Not required None None Partial
Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors, a different issue than CVE-2006-5468.
16 CVE-2007-0459 DoS 2007-02-02 2017-10-11
5.0
 None Remote Low Not required None None Partial
packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service (application crash or hang) via fragmented HTTP packets.
17 CVE-2007-3389 20 DoS 2007-06-26 2017-10-11
5.0
 None Remote Low Not required None None Partial
Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
18 CVE-2007-3390 DoS 2007-06-26 2017-10-11
5.0
 None Remote Low Not required None None Partial
Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service (crash) via crafted iSeries capture files that trigger a SIGTRAP.
19 CVE-2007-3392 DoS 2007-06-26 2018-10-16
5.0
 None Remote Low Not required None None Partial
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
20 CVE-2007-3393 DoS 2007-06-26 2017-10-11
5.0
 None Remote Low Not required None None Partial
Off-by-one error in the DHCP/BOOTP dissector in Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via crafted DHCP-over-DOCSIS packets.
21 CVE-2007-6113 189 DoS 2007-11-23 2018-10-15
4.3
 None Remote Medium Not required None None Partial
Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.
22 CVE-2007-6116 DoS 2007-11-23 2018-10-15
5.0
 None Remote Low Not required None None Partial
The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.
23 CVE-2007-6117 DoS Exec Code 2007-11-23 2018-10-15
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages.
24 CVE-2007-6120 119 DoS Overflow 2007-11-23 2018-10-15
5.0
 None Remote Low Not required None None Partial
The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
25 CVE-2007-6121 20 DoS 2007-11-23 2018-10-15
5.0
 None Remote Low Not required None None Partial
Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.
26 CVE-2007-6438 119 DoS Overflow 2007-12-19 2018-10-15
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
27 CVE-2007-6450 DoS 2007-12-19 2018-10-15
5.0
 None Remote Low Not required None None Partial
The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
28 CVE-2007-6451 399 DoS 2007-12-19 2018-10-15
4.3
 None Remote Medium Not required None None Partial
Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory.
29 CVE-2008-1070 DoS 2008-02-28 2018-10-11
5.0
 None Remote Low Not required None None Partial
The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
30 CVE-2008-1071 399 DoS 2008-02-28 2018-10-11
4.3
 None Remote Medium Not required None None Partial
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
31 CVE-2008-1072 DoS 2008-02-28 2018-10-11
4.7
 None Local Medium Not required None None Complete
The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.
32 CVE-2008-1561 DoS 2008-03-31 2018-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to cause a denial of service (application crash) via a malformed packet to the (1) X.509sat or (2) Roofnet dissectors. NOTE: Vector 2 might also lead to a hang.
33 CVE-2008-1562 20 DoS 2008-03-31 2018-10-11
5.0
 None Remote Low Not required None None Partial
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.
34 CVE-2008-1563 DoS 2008-03-31 2018-10-11
4.3
 None Remote Medium Not required None None Partial
The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
35 CVE-2008-3137 20 DoS 2008-07-10 2018-10-11
4.3
 None Remote Medium Not required None None Partial
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
36 CVE-2008-3138 200 DoS +Info 2008-07-10 2018-10-11
5.0
 None Remote Low Not required None None Partial
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.
37 CVE-2008-3139 200 DoS +Info 2008-07-10 2018-10-11
5.0
 None Remote Low Not required None None Partial
The RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: this might be due to a use-after-free error.
38 CVE-2008-3140 DoS 2008-07-10 2018-10-11
5.0
 None Remote Low Not required None None Partial
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
39 CVE-2008-3141 200 +Info 2008-07-10 2018-10-11
4.9
 None Local Low Not required Complete None None
Unspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0.0 allows remote attackers to read system memory via unspecified vectors.
40 CVE-2008-3145 20 DoS 2008-07-16 2018-10-11
5.0
 None Remote Low Not required None None Partial
The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.
41 CVE-2008-3932 20 DoS 2008-09-04 2018-10-11
5.0
 None Remote Low Not required None None Partial
Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service (hang) via a crafted NCP packet that triggers an infinite loop.
42 CVE-2008-4680 399 DoS 2008-10-22 2018-10-11
4.3
 None Remote Medium Not required None None Partial
packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a malformed USB Request Block (URB).
43 CVE-2008-4681 20 DoS 2008-10-22 2018-10-11
4.3
 None Remote Medium Not required None None Partial
Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via unknown packets.
44 CVE-2008-4682 20 DoS 2008-10-22 2018-10-11
5.0
 None Remote Low Not required None None Partial
wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an "unknown/unexpected packet type" that triggers a failed assertion.
45 CVE-2008-4683 399 DoS 2008-10-22 2018-10-11
5.0
 None Remote Low Not required None None Partial
The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvb_memcpy call.
46 CVE-2008-4684 399 DoS 2008-10-22 2018-10-11
4.3
 None Remote Medium Not required None None Partial
packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets, as demonstrated by enabling the (1) PRP or (2) MATE post dissector.
47 CVE-2008-4685 399 DoS 2008-10-22 2018-10-11
5.0
 None Remote Low Not required None None Partial
Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.
48 CVE-2008-5285 399 DoS 2008-12-01 2018-10-11
5.0
 None Remote Low Not required None None Partial
Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop.
49 CVE-2008-6472 399 DoS 2009-03-14 2017-09-29
4.3
 None Remote Medium Not required None None Partial
The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.
50 CVE-2009-0599 119 DoS Overflow 2009-02-16 2018-10-10
5.0
 None Remote Low Not required None None Partial
Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file.
Total number of vulnerabilities : 484   Page : 1 (This Page)2 3 4 5 6 7 8 9 10
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.