pkg:Alpine/wireshark

All known vulnerabilities

• HIGH7.8CVE-2018-10194ghostscript - security update
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-11362In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash.
  from 0, < 2.2.15-r0
• HIGH7.5CVE-2018-11360In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash.
  from 0, < 2.2.15-r0
• HIGH7.5CVE-2018-11359In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash.
  from 0, < 2.2.15-r0
• HIGH7.5CVE-2018-11358wireshark - security update
  from 0, < 2.2.15-r0
• HIGH7.5CVE-2018-11357In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory.
  from 0, < 2.2.15-r0
• HIGH7.5CVE-2018-11356In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash.
  from 0, < 2.2.15-r0
• HIGH7.5CVE-2018-9267In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak.
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-9264In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based buffer overflow.
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-9263In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash.
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-9262In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash.
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-9261In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overfl…
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-9260In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash.
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-9258In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash.
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-9257In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop.
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-9256In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash.
  from 0, < 2.2.14-r0
• HIGH7.5CVE-2018-5336In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash.
  from 0, < 2.2.12-r0
• HIGH7.5CVE-2017-17997In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes.
  from 0, < 2.2.12-r0
• HIGH7.5CVE-2017-17085In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash.
  from 0, < 2.2.11-r0
• HIGH7.5CVE-2017-17084In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash.
  from 0, < 2.2.11-r0
• HIGH7.5CVE-2017-17083In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash.
  from 0, < 2.2.11-r0
• HIGH7.5CVE-2017-15193In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory.
  from 0, < 2.2.10-r0
• HIGH7.5CVE-2017-15192In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash.
  from 0, < 2.2.10-r0
• HIGH7.5CVE-2017-15191In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash.
  from 0, < 2.2.10-r0
• HIGH7.5CVE-2017-13767In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop.
  from 0, < 2.2.9-r0
• HIGH7.5CVE-2017-13766In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write.
  from 0, < 2.2.9-r0
• HIGH7.5CVE-2017-13765In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash.
  from 0, < 2.2.9-r0
• HIGH7.5CVE-2017-11408wireshark - security update
  from 0, < 2.2.8-r0
• HIGH7.5CVE-2017-11407In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash.
  from 0, < 2.2.8-r0
• HIGH7.5CVE-2017-11406wireshark - security update
  from 0, < 2.2.8-r0
• HIGH7.5CVE-2017-9354In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9353In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9352In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9351In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9350In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9349In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9348In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9347In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9346In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9345In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9344wireshark - security update
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-9343In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer.
  from 0, < 2.2.7-r0
• HIGH7.5CVE-2017-7705In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection…
  from 0, < 2.2.6-r0
• HIGH7.5CVE-2017-7704In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file.
  from 0, < 2.2.6-r0
• HIGH7.5CVE-2017-7703In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file.
  from 0, < 2.2.6-r0
• HIGH7.5CVE-2017-7702In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a mal…
  from 0, < 2.2.6-r0
• HIGH7.5CVE-2017-7701In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malfo…
  from 0, < 2.2.6-r0
• HIGH7.5CVE-2017-6474In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file.
  from 0, < 2.2.5-r0
• HIGH7.5CVE-2017-6473In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file.
  from 0, < 2.2.5-r0
• HIGH7.5CVE-2017-6472In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed ca…
  from 0, < 2.2.5-r0
• HIGH7.5CVE-2017-6471In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file.
  from 0, < 2.2.5-r0
• HIGH7.5CVE-2017-6470In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file.
  from 0, < 2.2.5-r0
• HIGH7.5CVE-2017-6469In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture fil…
  from 0, < 2.2.5-r0
• HIGH7.5CVE-2017-6468In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file.
  from 0, < 2.2.5-r0
• HIGH7.5CVE-2017-6467In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file.
  from 0, < 2.2.5-r0
• HIGH7.5CVE-2017-6014wireshark - security update
  from 0, < 2.2.4-r1
• HIGH7.5CVE-2017-5597In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malform…
  from 0, < 2.2.4-r0
• HIGH7.5CVE-2017-5596wireshark - security update
  from 0, < 2.2.4-r0
• MEDIUM6.5CVE-2018-5335In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash.
  from 0, < 2.2.12-r0
• MEDIUM6.5CVE-2018-5334wireshark - security update
  from 0, < 2.2.12-r0
• MEDIUM6.5CVE-2017-7700In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture…
  from 0, < 2.2.6-r0
• MEDIUM5.9CVE-2016-6513epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows rem…
  from 0, < 2.0.5-r0
• MEDIUM5.9CVE-2016-6512epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote at…
  from 0, < 2.0.5-r0
• MEDIUM5.9CVE-2016-6511epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissect…
  from 0, < 2.0.5-r0
• MEDIUM5.9CVE-2016-6510Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote…
  from 0, < 2.0.5-r0
• MEDIUM5.9CVE-2016-6509epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which…
  from 0, < 2.0.5-r0
• MEDIUM5.9CVE-2016-6508epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data ty…
  from 0, < 2.0.5-r0
• MEDIUM5.9CVE-2016-6506epan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause…
  from 0, < 2.0.5-r0
• MEDIUM5.9CVE-2016-6505epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers…
  from 0, < 2.0.5-r0