Wireshark vulnerabilities

A crash vulnerability in the SSH dissector of Wireshark versions 4.4.0 through 4.4.8 allows denial of service. An attacker can cause the application to crash while parsing malicious SSH traffic.

Wireshark versions 4.0.0 to 4.0.6 contain a bug in the CBOR dissector that can lead to application crashes. An attacker can exploit this via packet injection or a crafted capture file to cause denial of service.

Wireshark versions 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 contain a vulnerability that can lead to a crash of the Kafka dissector. An attacker can exploit this via packet injection or a crafted capture file to cause a denial of service.