Where
-Infinity
0

Trending

Last week
Last month
Last year

Wireshark WiresharkMemory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 all…

Risk 45
Severity
6.3
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2022-4344

Wireshark WiresharkInfinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to…

Risk 47
Severity
6.3
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2022-3190

Wireshark WiresharkInfinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and …

Risk 37
Severity
6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2022-4345

Wireshark WiresharkInfinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows den…

Risk 44
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2022-0586

Wireshark WiresharkUse After Free

Risk 43
Severity
7.5
Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2022-0581

Wireshark WiresharkBuffer Overflow

Risk 43
Severity
7.5
Buffer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2022-3725

Wireshark WiresharkLarge loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow de…

Risk 37
Severity
6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

It was discovered that Wireshark before 3.6.2, 3.4.12 there are large loops in multiple dissectors, including AMP, ATN-ULCS and possibly other ASN.1 PER dissectors, BP, GDSDB, OpenFlow v5, PMUL, SoulSeek, TDS, WBXML, WSP and possibly other WAP dissectors, and ZigBee ZCL. It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Affected versions: 3.6.0 to 3.6.1, 3.4.0 to 3.4.11 Fixed versions: 3.6.2, 3.4.12

References: https://www.wireshark.org/security/wnpa-sec-2022-02 https://gitlab.com/wireshark/wireshark/-/issues/17829 https://gitlab.com/wireshark/wireshark/-/issues/17842 https://gitlab.com/wireshark/wireshark/-/issues/17847 https://gitlab.com/wireshark/wireshark/-/issues/17855 https://gitlab.com/wireshark/wireshark/-/issues/17891 https://gitlab.com/wireshark/wireshark/-/issues/17925 https://gitlab.com/wireshark/wireshark/-/issues/17926 https://gitlab.com/wireshark/wireshark/-/issues/17931 https://gitlab.com/wireshark/wireshark/-/issues/17932 https://gitlab.com/wireshark/wireshark/-/issues/17933

1 / 2
Source: Red Hat
First published (updated )
CVE-2022-0585

Wireshark WiresharkCrash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial o…

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2022-0583

Wireshark WiresharkNull Pointer Dereference, Input Validation

Risk 86
Severity
9.8
Null Pointer Dereference, Input Validation
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2022-0582

Wireshark WiresharkBuffer Over-read in Wireshark

Risk 32
Severity
7.5
EPSS
0.02%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

First published (updated )
CVE-2026-3203

Wireshark WiresharkBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

Risk 51
Severity
7.8
EPSS
0.02%
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file

Remedy

Upgrade to version 4.4.7, 4.2.13 or above.
First published (updated )
CVE-2025-5601

Wireshark WiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Risk 31
Severity
7.5
EPSS
0.04%
AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

First published (updated )
CVE-2024-4854

debian/wiresharkOut-of-bounds Read in Wireshark

Risk 27
Severity
6.5
EPSS
0.05%
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file

1 / 3

Remedy

Upgrade to version 4.0.11 or above.
First published (updated )
CVE-2023-6174

Wireshark WiresharkImproperly Controlled Sequential Memory Allocation in Wireshark

Risk 32
Severity
7.5
EPSS
0.02%
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

First published (updated )
CVE-2026-3201

Wireshark WiresharkNULL Pointer Dereference in Wireshark

Risk 31
Severity
7.5
EPSS
0.02%
Null Pointer Dereference
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service

Remedy

Upgrade to version 4.6.4 or above
First published (updated )
CVE-2026-3202

Wireshark WiresharkMismatched Memory Management Routines in Wireshark

Risk 51
Severity
7.8
EPSS
1.40%
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2024-2955

debian/wiresharkNull Pointer Dereference

Risk 43
Severity
7.5
Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2021-39920

Wireshark WiresharkCrash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via …

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2021-4182

Wireshark WiresharkCrash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service …

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2021-4181

Wireshark WiresharkNULL Pointer Dereference in Wireshark

Risk 51
Severity
7.8
EPSS
0.05%
Null Pointer Dereference
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2024-0209

Wireshark WiresharkImproper Handling of Missing Values in Wireshark

Risk 51
Severity
7.8
EPSS
0.05%
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2024-0208

debian/wiresharkBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

Risk 51
Severity
7.8
EPSS
0.05%
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NetScreen file parser crash

1 / 2

Remedy

Upgrade to versions 4.0.11, 3.6.19 or above.
First published (updated )
CVE-2023-6175

Wireshark WiresharkMemory Allocation with Excessive Size Value in Wireshark

Risk 27
Severity
6.5
EPSS
0.04%
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2023-5371

debian/wiresharkBuffer Overflow

Risk 47
Severity
7.1
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2023-1161

debian/wiresharkLarge loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows den…

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2021-39924

debian/wiresharkNull Pointer Dereference

Risk 43
Severity
7.5
Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2021-39921

Wireshark WiresharkInfinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service…

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2021-4185

Wireshark WiresharkInfinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial o…

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2021-4184

debian/wiresharkBuffer Overflow

Risk 43
Severity
7.5
Buffer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Buffer overflow in the Bluetooth HCIISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2021-39926

Wireshark WiresharkCrash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection…

Risk 43
Severity
7.5
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file

First published (updated )
CVE-2021-22174

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203