CVE-2023-0416
https://notcve.org/view.php?id=CVE-2023-0416
GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file El disector GNW falla en las versiones de Wireshark de la 4.0.0 a la 4.0.2 y de la 3.6.0 a la 3.6.10 y permite la denegación de servicio mediante inyección de paquetes o archivo de captura diseñado • https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0416.json https://gitlab.com/wireshark/wireshark/-/issues/18779 https://www.wireshark.org/security/wnpa-sec-2023-04.html • CWE-404: Improper Resource Shutdown or Release •
CVE-2022-4345
https://notcve.org/view.php?id=CVE-2022-4345
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file Los bucles infinitos en los disectores de protocolo BPv6, OpenFlow y Kafka en Wireshark 4.0.0 a 4.0.1 y 3.6.0 a 3.6.9 permiten la denegación de servicio mediante inyección de paquetes o archivo de captura manipulado • https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4345.json https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3 https://www.wireshark.org/security/wnpa-sec-2022-09.html • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVE-2022-4344
https://notcve.org/view.php?id=CVE-2022-4344
Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file El agotamiento de la memoria en el disector del protocolo Kafka en Wireshark 4.0.0 a 4.0.1 y 3.6.0 a 3.6.9 permite la denegación de servicio mediante inyección de paquetes o archivo de captura manipulado • https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3 https://www.wireshark.org/security/wnpa-sec-2022-10.html • CWE-400: Uncontrolled Resource Consumption •
CVE-2022-3724
https://notcve.org/view.php?id=CVE-2022-3724
Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows La falla en el disector del protocolo USB HID en Wireshark 3.6.0 a 3.6.8 permite la Denegación de Servicio (DoS) mediante inyección de paquetes o archivo de captura diseñado en Windows • https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3724.json https://gitlab.com/wireshark/wireshark/-/issues/18384 https://www.wireshark.org/security/wnpa-sec-2022-08.html • CWE-134: Use of Externally-Controlled Format String •
CVE-2022-3725
https://notcve.org/view.php?id=CVE-2022-3725
Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file La falla en el disector del protocolo OPUS en Wireshark versión 3.6.0 a la versión 3.6.8 permite la Denegación de Servicio mediante inyección de paquetes o archivo de captura manipulado • https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3725.json https://gitlab.com/wireshark/wireshark/-/issues/18378 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OIEIFFZ27YKCTK5C2VT4OEQSHPQDBNSF https://security.gentoo.org/glsa/202309-02 https://www.wireshark.org/security/wnpa-sec-2022-07.html • CWE-787: Out-of-bounds Write •