Vulnerabilities

TI-2023-01876 CVE-2023-1994 · GHSA-737h-r3q7-c58r

NULL pointer dereference in Wireshark

LOW 31

GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01001 Published 2023-04-12 Partial fix · 4.0.5, 3.6.13 CWE-476

TI-2023-01875 CVE-2023-1993 · GHSA-h4rg-h5cx-4r4w

LOW 36

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04095 Published 2023-04-12 Partial fix · 4.0.5, 3.6.13 CWE-834

TI-2023-01874 CVE-2023-1992 · GHSA-j3hh-fx42-vqq9

MEDIUM 40

RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0462 Published 2023-04-12 Partial fix · 4.0.5, 3.6.13 CWE-400