[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYLUT1jBRxo1z2DzlGHb_UdDPiqwpY97u4csxxkg9EHo":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":79,"topProductsByCves":80,"seoMetadata":82,"meta":91},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},35083,"wireshark",1,679,0,345,"2025-09-03","w",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},171742,"Wireshark is a technology vendor with 1 tracked product and 679 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,36,41,48,53,58,63,69,74],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2010-0304","Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.","2010-02-03",7.5,"v2","High",false,0.7408,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":35},"CVE-2013-4074","The dissect_capwap_data function in epan\u002Fdissectors\u002Fpacket-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.","2013-06-09",5,"Medium",0.60643,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":40},"CVE-2008-1562","The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.","2008-03-31",0.50693,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":47},"CVE-2014-2299","Buffer overflow in the mpeg_read function in wiretap\u002Fmpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.","2014-03-11",9.3,"Critical",0.47143,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":45,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":52},"CVE-2011-1591","Stack-based buffer overflow in the DECT dissector in epan\u002Fdissectors\u002Fpacket-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.","2011-04-29",0.41744,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":45,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":57},"CVE-2011-3360","Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.","2011-09-20",0.34509,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":45,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":62},"CVE-2010-4538","Buffer overflow in the sect_enttec_dmx_da function in epan\u002Fdissectors\u002Fpacket-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE) compression.","2011-01-07",0.28983,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":24,"cvssVersion":67,"severity":26,"isKev":27,"epssScore":68},"CVE-2018-19627","In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap\u002Fvwr.c by adjusting a buffer boundary.","2018-11-29","v3.0",0.17697,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":24,"cvssVersion":67,"severity":26,"isKev":27,"epssScore":73},"CVE-2017-17085","In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan\u002Fdissectors\u002Fpacket-cipsafety.c by validating the packet length.","2017-12-01",0.16655,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":78},"CVE-2007-3389","Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.","2007-06-26",0.16258,[],[81],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":83,"metaDescription":84,"keywords":85,"structuredData":86},"Wireshark - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Wireshark covering 1 product with 679 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Wireshark vulnerabilities, Wireshark security, Wireshark CVE, Wireshark threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":87,"@type":88,"name":89,"description":84,"url":90},"https:\u002F\u002Fschema.org","Organization","Wireshark","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fwireshark",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":92,"apiVersion":93},"2026-10-17T10:52:19.715Z","3.0"]