The Wireshark Foundation

11 CVEs across 1 The Wireshark Foundation products. Browse The Wireshark Foundation vulnerabilities, severities, and proof-of-concept exploits.

The Wireshark Foundation products with known CVEs

Product	CVEs
Wireshark	11

The Wireshark Foundation CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2021-22235`	High	`7.5`	2021-07-20	Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file
`CVE-2021-22222`	High	`7.5`	2021-06-07	Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file
`CVE-2021-22207`	Medium	`5.5`	2021-04-23	Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted captu…
`CVE-2021-22191`	Medium	`6.3`	2021-03-15	Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
`CVE-2021-22174`	Low	`3.7`	2021-02-17	Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
`CVE-2021-22173`	Low	`3.7`	2021-02-17	Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
`CVE-2020-26422`	Low	`3.7`	2020-12-21	Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file
`CVE-2020-26421`	Medium	`4.2`	2020-12-11	Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafte…
`CVE-2020-26420`	Low	`3.1`	2020-12-11	Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
`CVE-2020-26419`	Low	`3.1`	2020-12-11	Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.
`CVE-2020-26418`	Low	`3.1`	2020-12-11	Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.