Wireshark Foundation Wireshark vulnerabilities
185 known vulnerabilities affecting wireshark_foundation/wireshark.
Total CVEs
185
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH68MEDIUM114LOW1
Vulnerabilities
Page 5 of 10
CVE-2023-1994P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.5v>=3.6.0, <3.6.132023-04-12
CVE-2023-1994 [MEDIUM] CWE-400 CVE-2023-1994: GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via p
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
nvd
CVE-2023-0411P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.3v>=3.6.0, <3.6.112023-01-26
CVE-2023-0411 [MEDIUM] CWE-834 CVE-2023-0411: Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows de
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
nvd
CVE-2023-0413P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.3v>=3.6.0, <3.6.112023-01-26
CVE-2023-0413 [MEDIUM] CWE-404 CVE-2023-0413: Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service v
Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
nvd
CVE-2023-6174P4MEDIUMCVSS 6.5≥ 4.0.0, < 4.0.112023-11-16
CVE-2023-6174 [MEDIUM] CWE-125 CVE-2023-6174: SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or cr
SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file
nvd
CVE-2022-4345P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.2v>=3.6.0, <3.6.102023-01-12
CVE-2022-4345 [MEDIUM] CWE-835 CVE-2022-4345: Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file
nvd
CVE-2025-5601P4MEDIUMCVSS 6.5≥ 4.4.0, < 4.4.7≥ 4.2.0, < 4.2.132025-06-04
CVE-2025-5601 [MEDIUM] CWE-120 CVE-2025-5601: Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file
nvd
CVE-2026-76926P4MEDIUMCVSS 6.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76926 [MEDIUM] CWE-617 CVE-2026-76926: BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-0959P4MEDIUMCVSS 6.5≥ 4.6.0, < 4.6.3≥ 4.4.0, < 4.4.132026-01-14
CVE-2026-0959 [MEDIUM] CWE-787 CVE-2026-0959: IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial o
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
nvd
CVE-2026-0961P4MEDIUMCVSS 6.5≥ 4.6.0, < 4.6.3≥ 4.4.0, < 4.4.132026-01-14
CVE-2026-0961 [MEDIUM] CWE-787 CVE-2026-0961: BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
nvd
CVE-2023-0415P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.3v>=3.6.0, <3.6.112023-01-26
CVE-2023-0415 [MEDIUM] CWE-404 CVE-2023-0415: iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service v
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
nvd
CVE-2023-0416P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.3v>=3.6.0, <3.6.112023-01-26
CVE-2023-0416 [MEDIUM] CWE-404 CVE-2023-0416: GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via
GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
nvd
CVE-2023-0417P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.3v>=3.6.0, <3.6.112023-01-26
CVE-2023-0417 [MEDIUM] CWE-404 CVE-2023-0417: Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial o
Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
nvd
CVE-2023-0414P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.32023-01-26
CVE-2023-0414 [MEDIUM] CWE-404 CVE-2023-0414: Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection
Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file
nvd
CVE-2026-76885P4MEDIUMCVSS 6.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76885 [MEDIUM] CWE-126 CVE-2026-76885: Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-76884P4MEDIUMCVSS 6.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76884 [MEDIUM] CWE-126 CVE-2026-76884: ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2023-2854P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.6v>=3.6.0, <3.6.142023-05-26
CVE-2023-2854 [MEDIUM] CWE-787 CVE-2023-2854: BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via c
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
nvd
CVE-2023-2857P4MEDIUMCVSS 6.5v>=4.0.0, <4.0.6v>=3.6.0, <3.6.142023-05-26
CVE-2023-2857 [MEDIUM] CWE-787 CVE-2023-2857: BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via c
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
nvd
CVE-2023-5371P4MEDIUMCVSS 6.5≥ 4.0.0, < 4.0.9≥ 3.6.0, < 3.6.172023-10-04
CVE-2023-5371 [MEDIUM] CWE-789 CVE-2023-5371: RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service
RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
nvd
CVE-2026-76890P4MEDIUMCVSS 6.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76890 [MEDIUM] CWE-825 CVE-2026-76890: Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-76891P4MEDIUMCVSS 6.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76891 [MEDIUM] CWE-825 CVE-2026-76891: Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd