Vulnerabilidades em Wireshark Foundation
141 resultadosAnálise Vexday
Com 129 CVEs catalogadas e nenhuma em exploração ativa confirmada pelo CISA KEV, o Wireshark Foundation apresenta taxa de exploração abaixo da média geral do catálogo, o que sugere menor pressão imediata de ameaças oportunistas. Ainda assim, 44 vulnerabilidades surgiram nos últimos 90 dias — volume que merece acompanhamento contínuo — e 15 possuem PoC pública disponível, ampliando a superfície de risco potencial. O tipo de falha mais recorrente é CWE-835 (loop infinito), padrão que tipicamente viabiliza negação de serviço em ferramentas de análise de tráfego como o Wireshark. A CVE mais perigosa atualmente rastreada é CVE-2021-39925, com escore EPSS de 0,0789, indicando probabilidade ainda baixa, porém não desprezível, de exploração em curto prazo.
CVE-2021-39925HIGHBuffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injectionEPSS 7.9%CVE-2021-39926HIGHBuffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted captEPSS 7.6%CVE-2021-39928HIGHNULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injeEPSS 5.5%CVE-2021-39922HIGHBuffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or craEPSS 5.2%CVE-2021-39924HIGHLarge loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or cEPSS 4.9%CVE-2023-1992MEDIUMRPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture fiEPSS 4.6%CVE-2023-1993MEDIUMLISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture fEPSS 4.1%CVE-2021-4184HIGHInfinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafteEPSS 3.9%CVE-2021-4185HIGHInfinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted captureEPSS 3.9%CVE-2021-4181HIGHCrash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture EPSS 3.8%CVE-2021-39929HIGHUncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet inEPSS 3.5%CVE-2023-6175HIGHBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') in WiresharkEPSS 3.5%CVE-2021-4182HIGHCrash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture fileEPSS 3.3%CVE-2021-39921HIGHNULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injectionEPSS 3.2%CVE-2021-39920HIGHNULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture EPSS 3.2%CVE-2021-4190HIGHLarge loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture fileEPSS 3.1%CVE-2023-2906—Wireshark CP2179 divide by zeroEPSS 2.8%CVE-2022-0585MEDIUMLarge loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or EPSS 2.4%CVE-2022-3724MEDIUMCrash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file onEPSS 2.3%CVE-2023-0668MEDIUMWireshark IEEE-C37.118 parsing buffer overflowEPSS 2.3%