| CVE-2024-9781 | ALTO7.5 | AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file | 10/10/2024 |
| CVE-2024-9780 | MÉDIO5.5 | ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file | 10/10/2024 |
| CVE-2024-8645 | MÉDIO5.5 | SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file | 10/09/2024 |
| CVE-2024-8250 | MÉDIO5.5 | NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file | 29/08/2024 |
| CVE-2024-4855 | MÉDIO5.5 | Use after free issue in editcap could cause denial of service via crafted capture file | 14/05/2024 |
| CVE-2024-4854 | ALTO7.5 | MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file | 14/05/2024 |
| CVE-2024-4853 | MÉDIO5.5 | Memory handling issue in editcap could cause denial of service via crafted capture file | 14/05/2024 |
| CVE-2024-2955 | ALTO7.5 | T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file | 26/03/2024 |
| CVE-2023-6175 | ALTO7.8 | NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file | 26/03/2024 |
| CVE-2024-24479 | ALTO7.5 | A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected. | 21/02/2024 |
| CVE-2024-24476 | ALTO7.5 | A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected. | 21/02/2024 |
| CVE-2024-24478 | ALTO7.5 | An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected. | 21/02/2024 |
| CVE-2024-0211 | ALTO7.5 | DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file | 03/01/2024 |
| CVE-2024-0210 | ALTO7.5 | Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file | 03/01/2024 |
| CVE-2024-0209 | ALTO7.5 | IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file | 03/01/2024 |
| CVE-2024-0208 | ALTO7.5 | GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file | 03/01/2024 |
| CVE-2024-0207 | ALTO7.5 | HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file | 03/01/2024 |
| CVE-2023-6174 | MÉDIO6.5 | SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file | 16/11/2023 |
| CVE-2023-5371 | MÉDIO6.5 | RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file | 04/10/2023 |
| CVE-2023-2906 | MÉDIO6.5 | Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. | 25/08/2023 |