Wireshark vulnerabilities

The Bluetooth BR/EDR FHS protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to a denial-of-service condition.

The CMS protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to a denial-of-service condition.

The 3gpp phone log file parser in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

The ESS protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

The SSH protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

The Bluetooth AVRCP Profile protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

The UMTS FP protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

A crash in the C12.22 protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

The Catapult DCT2000 file parser in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

The Bluetooth Attribute Protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

The CMS protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

A crash in the RRC protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

A crash in the C12.22 protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

The BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure.

A vulnerability in the Catapult DCT2000 protocol dissector in Wireshark causes a crash. Versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 are susceptible to a denial of service attack.

The pcapng file parser in Wireshark 4.6.0 to 4.6.6 contains a crash vulnerability. An attacker can cause a denial of service (DoS) by providing a specially crafted pcapng file.

A vulnerability in the FMP/NOTIFY protocol dissector in Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 causes a crash, leading to denial of service.

A vulnerability in the SSH protocol dissector in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 causes a crash, allowing an attacker to perform a denial of service (DoS) attack.

A vulnerability in the Z39.50 protocol dissector in Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 causes a crash, allowing an attacker to perform a denial of service (DoS) attack.

A vulnerability in the UMTS FP protocol dissector in Wireshark causes a crash, leading to denial of service. Affected versions are 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16.

The DBS Etherwatch file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 crashes, allowing an attacker to cause a denial of service (DoS).

A vulnerability in the IEEE 802.11 protocol dissector in Wireshark causes a crash. Affected versions are 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16.

A vulnerability in Wireshark 4.6.0 to 4.6.6 causes a crash in the TLS ECH decryptor, allowing an attacker to trigger a denial of service (DoS) by sending specially crafted network traffic.

Multiple infinite loops in protocol dissectors in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service attacks.

A path traversal vulnerability in the profile import feature of Wireshark 4.6.0–4.6.4 and 4.4.0–4.4.14 allows an attacker to cause denial of service or possibly execute arbitrary code.

A vulnerability in the RDP protocol dissector in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 causes a crash, potentially leading to denial of service and possible code execution.

A vulnerability in the SBC codec decompression in Wireshark can cause a crash, denial of service, and potentially code execution. Affects versions 4.6.0-4.6.4 and 4.4.0-4.4.14.

GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

The BEEP protocol dissector in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 contains a crash vulnerability. This can be exploited to cause a denial of service.

LZ77 decompression crash in the dissection engine in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service.

A vulnerability in Wireshark versions 4.6.0 to 4.6.4 causes a crash in the RTSP protocol dissector. This can lead to application termination while analyzing network traffic.

A vulnerability in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 causes a crash in the MySQL protocol dissector. This allows an attacker to trigger a denial of service (DoS).

A vulnerability in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 causes an infinite loop in the RPKI-Router protocol dissector. This allows an attacker to trigger a denial of service (DoS).

OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

An AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

A heap overflow vulnerability in the TLS protocol dissector in Wireshark 4.6.0 through 4.6.4 allows remote attackers to cause a denial of service or potentially execute arbitrary code.

A vulnerability in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 causes a crash in the ICMPv6 PvD protocol dissector. This allows an attacker to trigger a denial of service (DoS).

The UDS protocol dissector in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 contains an infinite loop vulnerability. This can be exploited to cause a denial of service.

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service.

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service. The vulnerability can be exploited by providing a specially crafted packet for analysis.

Infinite loop in the MONGO dissector in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service. This can cause Wireshark to hang or crash when processing malicious MONGO traffic.