Wireshark vulnerabilities

A crash in the C12.22 protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

The BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure.

A vulnerability in the Catapult DCT2000 protocol dissector in Wireshark causes a crash. Versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 are susceptible to a denial of service attack.

The pcapng file parser in Wireshark 4.6.0 to 4.6.6 contains a crash vulnerability. An attacker can cause a denial of service (DoS) by providing a specially crafted pcapng file.

A vulnerability in the FMP/NOTIFY protocol dissector in Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 causes a crash, leading to denial of service.

A vulnerability in the SSH protocol dissector in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 causes a crash, allowing an attacker to perform a denial of service (DoS) attack.

A vulnerability in the Z39.50 protocol dissector in Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 causes a crash, allowing an attacker to perform a denial of service (DoS) attack.

A vulnerability in the UMTS FP protocol dissector in Wireshark causes a crash, leading to denial of service. Affected versions are 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16.

The DBS Etherwatch file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 crashes, allowing an attacker to cause a denial of service (DoS).

A vulnerability in the IEEE 802.11 protocol dissector in Wireshark causes a crash. Affected versions are 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16.

A vulnerability in Wireshark 4.6.0 to 4.6.6 causes a crash in the TLS ECH decryptor, allowing an attacker to trigger a denial of service (DoS) by sending specially crafted network traffic.

Multiple infinite loops in protocol dissectors in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service attacks.

A path traversal vulnerability in the profile import feature of Wireshark 4.6.0–4.6.4 and 4.4.0–4.4.14 allows an attacker to cause denial of service or possibly execute arbitrary code.

A vulnerability in the RDP protocol dissector in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 causes a crash, potentially leading to denial of service and possible code execution.

A vulnerability in the SBC codec decompression in Wireshark can cause a crash, denial of service, and potentially code execution. Affects versions 4.6.0-4.6.4 and 4.4.0-4.4.14.

A heap overflow vulnerability in the TLS protocol dissector in Wireshark 4.6.0 through 4.6.4 allows remote attackers to cause a denial of service or potentially execute arbitrary code.

Wireshark versions 4.0.0 to 4.0.6 contain a bug in the CBOR dissector that can lead to application crashes. An attacker can exploit this via packet injection or a crafted capture file to cause denial of service.

Wireshark versions 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 contain a vulnerability that can lead to a crash of the Kafka dissector. An attacker can exploit this via packet injection or a crafted capture file to cause a denial of service.