# libwireshark11 2.6.3-1~ubuntu18.04.1: libwireshark11 2.6.3-1~ubuntu18.04.1 for Ubuntu 18.04.6 LTS (bionic)

libwireshark11 2.6.3-1~ubuntu18.04.1, released August 29, 2018, fixes 190 CVEs in libwireshark11. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-libwireshark11-2.6.3-1-ubuntu18.04.1
- Platform: Linux
- Released: Aug 29, 2018
- Priority: Routine (Closes 190 CVEs, none high severity)
- CVEs: 190, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [libwireshark11](https://patchblox.com/security/data/product/linux/libwireshark11.md) | Ubuntu 18.04.6 LTS (bionic) | 2.6.3-1~ubuntu18.04.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2017-17085](https://patchblox.com/security/data/cve/CVE-2017-17085.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash | n/a | 0.1666 |  |
| [CVE-2017-9353](https://patchblox.com/security/data/cve/CVE-2017-9353.md) | Routine | wireshark-qt: In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash | n/a | 0.1401 |  |
| [CVE-2017-9347](https://patchblox.com/security/data/cve/CVE-2017-9347.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference | n/a | 0.1384 |  |
| [CVE-2016-6512](https://patchblox.com/security/data/cve/CVE-2016-6512.md) | Routine | libwireshark11: epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function,... | n/a | 0.0760 |  |
| [CVE-2014-5116](https://patchblox.com/security/data/cve/CVE-2014-5116.md) | Routine | wireshark: The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent at... | n/a | 0.0758 |  |
| [CVE-2015-8740](https://patchblox.com/security/data/cve/CVE-2015-8740.md) | Routine | libwireshark11: The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x b... | n/a | 0.0668 |  |
| [CVE-2015-0561](https://patchblox.com/security/data/cve/CVE-2015-0561.md) | Routine | wireshark-qt: asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a... | n/a | 0.0561 |  |
| [CVE-2015-8725](https://patchblox.com/security/data/cve/CVE-2015-8725.md) | Routine | libwireshark11: The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector... | n/a | 0.0516 |  |
| [CVE-2015-8728](https://patchblox.com/security/data/cve/CVE-2015-8728.md) | Routine | libwireshark11: The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/pac... | n/a | 0.0467 |  |
| [CVE-2015-2189](https://patchblox.com/security/data/cve/CVE-2015-2189.md) | Routine | libwireshark11: Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before... | n/a | 0.0460 |  |
| [CVE-2015-8732](https://patchblox.com/security/data/cve/CVE-2015-8732.md) | Routine | libwireshark11: The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL diss... | n/a | 0.0447 |  |
| [CVE-2015-2188](https://patchblox.com/security/data/cve/CVE-2015-2188.md) | Routine | libwireshark11: epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does no... | n/a | 0.0439 |  |
| [CVE-2015-8726](https://patchblox.com/security/data/cve/CVE-2015-8726.md) | Routine | libwireshark11: wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate... | n/a | 0.0436 |  |
| [CVE-2015-8736](https://patchblox.com/security/data/cve/CVE-2015-8736.md) | Routine | libwireshark11: The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not re... | n/a | 0.0434 |  |
| [CVE-2015-8730](https://patchblox.com/security/data/cve/CVE-2015-8730.md) | Routine | libwireshark11: epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not... | n/a | 0.0420 |  |
| [CVE-2015-8727](https://patchblox.com/security/data/cve/CVE-2015-8727.md) | Routine | libwireshark11: The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.... | n/a | 0.0416 |  |
| [CVE-2015-8735](https://patchblox.com/security/data/cve/CVE-2015-8735.md) | Routine | libwireshark11: The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wiresha... | n/a | 0.0414 |  |
| [CVE-2015-8739](https://patchblox.com/security/data/cve/CVE-2015-8739.md) | Routine | libwireshark11: The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1... | n/a | 0.0414 |  |
| [CVE-2015-8729](https://patchblox.com/security/data/cve/CVE-2015-8729.md) | Routine | libwireshark11: The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.... | n/a | 0.0410 |  |
| [CVE-2015-8733](https://patchblox.com/security/data/cve/CVE-2015-8733.md) | Routine | libwireshark11: The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.... | n/a | 0.0410 |  |
| [CVE-2015-2191](https://patchblox.com/security/data/cve/CVE-2015-2191.md) | Routine | libwireshark11: Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.1... | n/a | 0.0389 |  |
| [CVE-2018-14368](https://patchblox.com/security/data/cve/CVE-2018-14368.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infi... | n/a | 0.0380 |  |
| [CVE-2014-8713](https://patchblox.com/security/data/cve/CVE-2014-8713.md) | Routine | wireshark: Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissec... | n/a | 0.0379 |  |
| [CVE-2018-14342](https://patchblox.com/security/data/cve/CVE-2018-14342.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop | n/a | 0.0372 |  |
| [CVE-2015-3812](https://patchblox.com/security/data/cve/CVE-2015-3812.md) | Routine | libwireshark11: Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wires... | n/a | 0.0367 |  |
| [CVE-2018-14341](https://patchblox.com/security/data/cve/CVE-2018-14341.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infini... | n/a | 0.0362 |  |
| [CVE-2015-4651](https://patchblox.com/security/data/cve/CVE-2015-4651.md) | Routine | libwireshark11: The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1... | n/a | 0.0350 |  |
| [CVE-2014-8714](https://patchblox.com/security/data/cve/CVE-2014-8714.md) | Routine | libwsutil9: The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1... | n/a | 0.0349 |  |
| [CVE-2018-16058](https://patchblox.com/security/data/cve/CVE-2018-16058.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash | n/a | 0.0348 |  |
| [CVE-2018-14340](https://patchblox.com/security/data/cve/CVE-2018-14340.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash | n/a | 0.0347 |  |
| [CVE-2018-14339](https://patchblox.com/security/data/cve/CVE-2018-14339.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop | n/a | 0.0347 |  |
| [CVE-2018-16057](https://patchblox.com/security/data/cve/CVE-2018-16057.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash | n/a | 0.0347 |  |
| [CVE-2018-14370](https://patchblox.com/security/data/cve/CVE-2018-14370.md) | Routine | wireshark: In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash | n/a | 0.0344 |  |
| [CVE-2017-9766](https://patchblox.com/security/data/cve/CVE-2017-9766.md) | Routine | libwireshark11: In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service... | n/a | 0.0342 |  |
| [CVE-2017-9350](https://patchblox.com/security/data/cve/CVE-2017-9350.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory | n/a | 0.0341 |  |
| [CVE-2018-16056](https://patchblox.com/security/data/cve/CVE-2018-16056.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash | n/a | 0.0340 |  |
| [CVE-2018-11360](https://patchblox.com/security/data/cve/CVE-2018-11360.md) | Routine | libwireshark11: In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash | n/a | 0.0340 |  |
| [CVE-2018-14344](https://patchblox.com/security/data/cve/CVE-2018-14344.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash | n/a | 0.0337 |  |
| [CVE-2018-14343](https://patchblox.com/security/data/cve/CVE-2018-14343.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash | n/a | 0.0331 |  |
| [CVE-2018-14369](https://patchblox.com/security/data/cve/CVE-2018-14369.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash | n/a | 0.0331 |  |
| [CVE-2018-14367](https://patchblox.com/security/data/cve/CVE-2018-14367.md) | Routine | libwireshark11: In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash | n/a | 0.0328 |  |
| [CVE-2017-7703](https://patchblox.com/security/data/cve/CVE-2017-7703.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a m... | n/a | 0.0326 |  |
| [CVE-2017-9343](https://patchblox.com/security/data/cve/CVE-2017-9343.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer | n/a | 0.0324 |  |
| [CVE-2014-8711](https://patchblox.com/security/data/cve/CVE-2014-8711.md) | Routine | libwsutil9: Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11... | n/a | 0.0323 |  |
| [CVE-2015-6244](https://patchblox.com/security/data/cve/CVE-2015-6244.md) | Routine | libwireshark11: The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.... | n/a | 0.0323 |  |
| [CVE-2014-8712](https://patchblox.com/security/data/cve/CVE-2014-8712.md) | Routine | libwireshark11: The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before... | n/a | 0.0310 |  |
| [CVE-2016-2525](https://patchblox.com/security/data/cve/CVE-2016-2525.md) | Routine | libwireshark11: epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of h... | n/a | 0.0308 |  |
| [CVE-2017-9346](https://patchblox.com/security/data/cve/CVE-2017-9346.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop | n/a | 0.0305 |  |
| [CVE-2017-11407](https://patchblox.com/security/data/cve/CVE-2017-11407.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash | n/a | 0.0303 |  |
| [CVE-2017-9345](https://patchblox.com/security/data/cve/CVE-2017-9345.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop | n/a | 0.0302 |  |
| [CVE-2018-11362](https://patchblox.com/security/data/cve/CVE-2018-11362.md) | Routine | libwireshark11: In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash | n/a | 0.0302 |  |
| [CVE-2015-3814](https://patchblox.com/security/data/cve/CVE-2015-3814.md) | Routine | libwireshark11: The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE... | n/a | 0.0298 |  |
| [CVE-2015-6248](https://patchblox.com/security/data/cve/CVE-2015-6248.md) | Routine | libwireshark11: The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not... | n/a | 0.0297 |  |
| [CVE-2017-9352](https://patchblox.com/security/data/cve/CVE-2017-9352.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop | n/a | 0.0296 |  |
| [CVE-2015-6243](https://patchblox.com/security/data/cve/CVE-2015-6243.md) | Routine | libwireshark11: The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for e... | n/a | 0.0296 |  |
| [CVE-2015-6246](https://patchblox.com/security/data/cve/CVE-2015-6246.md) | Routine | libwireshark11: The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x... | n/a | 0.0296 |  |
| [CVE-2017-17935](https://patchblox.com/security/data/cve/CVE-2017-17935.md) | Routine | libwireshark11: The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' chara... | n/a | 0.0296 |  |
| [CVE-2015-6245](https://patchblox.com/security/data/cve/CVE-2015-6245.md) | Routine | libwireshark11: epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect int... | n/a | 0.0295 |  |
| [CVE-2017-11406](https://patchblox.com/security/data/cve/CVE-2017-11406.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop | n/a | 0.0294 |  |
| [CVE-2017-9349](https://patchblox.com/security/data/cve/CVE-2017-9349.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop | n/a | 0.0294 |  |
| [CVE-2015-3811](https://patchblox.com/security/data/cve/CVE-2015-3811.md) | Routine | libwireshark11: epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 imprope... | n/a | 0.0291 |  |
| [CVE-2014-6421](https://patchblox.com/security/data/cve/CVE-2014-6421.md) | Routine | libwireshark11: Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause... | n/a | 0.0291 |  |
| [CVE-2015-3809](https://patchblox.com/security/data/cve/CVE-2015-3809.md) | Routine | libwireshark11: The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12... | n/a | 0.0287 |  |
| [CVE-2018-9261](https://patchblox.com/security/data/cve/CVE-2018-9261.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a he... | n/a | 0.0284 |  |
| [CVE-2015-6249](https://patchblox.com/security/data/cve/CVE-2015-6249.md) | Routine | libwireshark11: The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1... | n/a | 0.0284 |  |
| [CVE-2017-9351](https://patchblox.com/security/data/cve/CVE-2017-9351.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer | n/a | 0.0283 |  |
| [CVE-2015-6241](https://patchblox.com/security/data/cve/CVE-2015-6241.md) | Routine | libwireshark11: The proto_tree_add_bytes_item function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before... | n/a | 0.0281 |  |
| [CVE-2015-6242](https://patchblox.com/security/data/cve/CVE-2015-6242.md) | Routine | libwireshark11: The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memor... | n/a | 0.0281 |  |
| [CVE-2015-6247](https://patchblox.com/security/data/cve/CVE-2015-6247.md) | Routine | libwireshark11: The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wiresh... | n/a | 0.0281 |  |
| [CVE-2015-3808](https://patchblox.com/security/data/cve/CVE-2015-3808.md) | Routine | libwireshark11: The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12... | n/a | 0.0280 |  |
| [CVE-2017-9354](https://patchblox.com/security/data/cve/CVE-2017-9354.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash | n/a | 0.0279 |  |
| [CVE-2018-11356](https://patchblox.com/security/data/cve/CVE-2018-11356.md) | Routine | libwireshark11: In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash | n/a | 0.0279 |  |
| [CVE-2018-11357](https://patchblox.com/security/data/cve/CVE-2018-11357.md) | Routine | libwireshark11: In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessi... | n/a | 0.0279 |  |
| [CVE-2015-0564](https://patchblox.com/security/data/cve/CVE-2015-0564.md) | Routine | libwireshark11: Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before... | n/a | 0.0278 |  |
| [CVE-2018-11361](https://patchblox.com/security/data/cve/CVE-2018-11361.md) | Routine | libwireshark11: In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash | n/a | 0.0278 |  |
| [CVE-2018-11358](https://patchblox.com/security/data/cve/CVE-2018-11358.md) | Routine | libwireshark11: In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash | n/a | 0.0277 |  |
| [CVE-2017-7748](https://patchblox.com/security/data/cve/CVE-2017-7748.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packe... | n/a | 0.0277 |  |
| [CVE-2017-13765](https://patchblox.com/security/data/cve/CVE-2017-13765.md) | Routine | libwireshark11: In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application... | n/a | 0.0276 |  |
| [CVE-2018-5336](https://patchblox.com/security/data/cve/CVE-2018-5336.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash | n/a | 0.0274 |  |
| [CVE-2018-7335](https://patchblox.com/security/data/cve/CVE-2018-7335.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash | n/a | 0.0274 |  |
| [CVE-2018-7420](https://patchblox.com/security/data/cve/CVE-2018-7420.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash | n/a | 0.0274 |  |
| [CVE-2016-5352](https://patchblox.com/security/data/cve/CVE-2016-5352.md) | Routine | libwireshark11: epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, wh... | n/a | 0.0274 |  |
| [CVE-2017-9344](https://patchblox.com/security/data/cve/CVE-2017-9344.md) | Routine | libwireshark-data: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero | n/a | 0.0272 |  |
| [CVE-2017-9348](https://patchblox.com/security/data/cve/CVE-2017-9348.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer | n/a | 0.0272 |  |
| [CVE-2017-15191](https://patchblox.com/security/data/cve/CVE-2017-15191.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash | n/a | 0.0272 |  |
| [CVE-2017-17083](https://patchblox.com/security/data/cve/CVE-2017-17083.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash | n/a | 0.0272 |  |
| [CVE-2017-17084](https://patchblox.com/security/data/cve/CVE-2017-17084.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash | n/a | 0.0272 |  |
| [CVE-2018-6836](https://patchblox.com/security/data/cve/CVE-2018-6836.md) | Routine | libwireshark11: The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an... | n/a | 0.0272 |  |
| [CVE-2018-11359](https://patchblox.com/security/data/cve/CVE-2018-11359.md) | Routine | libwireshark11: In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash | n/a | 0.0271 |  |
| [CVE-2017-7701](https://patchblox.com/security/data/cve/CVE-2017-7701.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packe... | n/a | 0.0271 |  |
| [CVE-2017-7702](https://patchblox.com/security/data/cve/CVE-2017-7702.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by pac... | n/a | 0.0271 |  |
| [CVE-2017-7704](https://patchblox.com/security/data/cve/CVE-2017-7704.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a mal... | n/a | 0.0271 |  |
| [CVE-2017-7705](https://patchblox.com/security/data/cve/CVE-2017-7705.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggere... | n/a | 0.0271 |  |
| [CVE-2018-7417](https://patchblox.com/security/data/cve/CVE-2018-7417.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash | n/a | 0.0270 |  |
| [CVE-2018-7334](https://patchblox.com/security/data/cve/CVE-2018-7334.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash | n/a | 0.0267 |  |
| [CVE-2018-7336](https://patchblox.com/security/data/cve/CVE-2018-7336.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash | n/a | 0.0267 |  |
| [CVE-2018-7418](https://patchblox.com/security/data/cve/CVE-2018-7418.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash | n/a | 0.0267 |  |
| [CVE-2018-7419](https://patchblox.com/security/data/cve/CVE-2018-7419.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash | n/a | 0.0267 |  |
| [CVE-2017-15193](https://patchblox.com/security/data/cve/CVE-2017-15193.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory | n/a | 0.0266 |  |
| [CVE-2015-0562](https://patchblox.com/security/data/cve/CVE-2015-0562.md) | Routine | libwireshark11: Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissect... | n/a | 0.0265 |  |
| [CVE-2018-7320](https://patchblox.com/security/data/cve/CVE-2018-7320.md) | Routine | libwscodecs2: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash | n/a | 0.0262 |  |
| [CVE-2018-7337](https://patchblox.com/security/data/cve/CVE-2018-7337.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash | n/a | 0.0262 |  |
| [CVE-2016-5359](https://patchblox.com/security/data/cve/CVE-2016-5359.md) | Routine | libwireshark11: epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which al... | n/a | 0.0258 |  |
| [CVE-2018-9264](https://patchblox.com/security/data/cve/CVE-2018-9264.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based buffer overflow | n/a | 0.0256 |  |
| [CVE-2018-9263](https://patchblox.com/security/data/cve/CVE-2018-9263.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash | n/a | 0.0248 |  |
| [CVE-2017-7746](https://patchblox.com/security/data/cve/CVE-2017-7746.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by pack... | n/a | 0.0247 |  |
| [CVE-2017-7747](https://patchblox.com/security/data/cve/CVE-2017-7747.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or... | n/a | 0.0247 |  |
| [CVE-2017-7745](https://patchblox.com/security/data/cve/CVE-2017-7745.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by p... | n/a | 0.0246 |  |
| [CVE-2018-7322](https://patchblox.com/security/data/cve/CVE-2018-7322.md) | Routine | wireshark-qt: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that was addressed... | n/a | 0.0246 |  |
| [CVE-2018-7323](https://patchblox.com/security/data/cve/CVE-2018-7323.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by... | n/a | 0.0246 |  |
| [CVE-2015-0563](https://patchblox.com/security/data/cve/CVE-2015-0563.md) | Routine | libwireshark11: epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses... | n/a | 0.0244 |  |
| [CVE-2017-15192](https://patchblox.com/security/data/cve/CVE-2017-15192.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash | n/a | 0.0243 |  |
| [CVE-2018-7324](https://patchblox.com/security/data/cve/CVE-2018-7324.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addresse... | n/a | 0.0239 |  |
| [CVE-2017-11408](https://patchblox.com/security/data/cve/CVE-2017-11408.md) | Routine | libwscodecs2: In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash | n/a | 0.0235 |  |
| [CVE-2016-5358](https://patchblox.com/security/data/cve/CVE-2016-5358.md) | Routine | libwireshark11: epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header d... | n/a | 0.0234 |  |
| [CVE-2018-7325](https://patchblox.com/security/data/cve/CVE-2018-7325.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an infinite loop that was addr... | n/a | 0.0234 |  |
| [CVE-2018-7331](https://patchblox.com/security/data/cve/CVE-2018-7331.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed... | n/a | 0.0234 |  |
| [CVE-2018-7332](https://patchblox.com/security/data/cve/CVE-2018-7332.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addres... | n/a | 0.0234 |  |
| [CVE-2018-9268](https://patchblox.com/security/data/cve/CVE-2018-9268.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak. | n/a | 0.0233 |  |
| [CVE-2018-9269](https://patchblox.com/security/data/cve/CVE-2018-9269.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-giop.c has a memory leak. | n/a | 0.0233 |  |
| [CVE-2018-9270](https://patchblox.com/security/data/cve/CVE-2018-9270.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak. | n/a | 0.0233 |  |
| [CVE-2015-4652](https://patchblox.com/security/data/cve/CVE-2015-4652.md) | Routine | libwireshark11: epan/dissectors/packet-gsm_a_dtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly val... | n/a | 0.0230 |  |
| [CVE-2018-9256](https://patchblox.com/security/data/cve/CVE-2018-9256.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash | n/a | 0.0226 |  |
| [CVE-2018-9262](https://patchblox.com/security/data/cve/CVE-2018-9262.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash | n/a | 0.0226 |  |
| [CVE-2017-11409](https://patchblox.com/security/data/cve/CVE-2017-11409.md) | Routine | libwireshark11: In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop | n/a | 0.0226 |  |
| [CVE-2016-7958](https://patchblox.com/security/data/cve/CVE-2016-7958.md) | Routine | wireshark-qt: In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file | n/a | 0.0225 |  |
| [CVE-2018-9259](https://patchblox.com/security/data/cve/CVE-2018-9259.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash | n/a | 0.0224 |  |
| [CVE-2018-9267](https://patchblox.com/security/data/cve/CVE-2018-9267.md) | Routine | wireshark: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak. | n/a | 0.0224 |  |
| [CVE-2016-2528](https://patchblox.com/security/data/cve/CVE-2016-2528.md) | Routine | libwireshark11: The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0... | n/a | 0.0221 |  |
| [CVE-2018-7333](https://patchblox.com/security/data/cve/CVE-2018-7333.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addre... | n/a | 0.0219 |  |
| [CVE-2018-7326](https://patchblox.com/security/data/cve/CVE-2018-7326.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addresse... | n/a | 0.0217 |  |
| [CVE-2018-7327](https://patchblox.com/security/data/cve/CVE-2018-7327.md) | Routine | libwscodecs2: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was a... | n/a | 0.0217 |  |
| [CVE-2016-4079](https://patchblox.com/security/data/cve/CVE-2016-4079.md) | Routine | libwireshark11: epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does no... | n/a | 0.0216 |  |
| [CVE-2016-4084](https://patchblox.com/security/data/cve/CVE-2016-4084.md) | Routine | libwireshark11: Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 al... | n/a | 0.0214 |  |
| [CVE-2018-7328](https://patchblox.com/security/data/cve/CVE-2018-7328.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed... | n/a | 0.0213 |  |
| [CVE-2018-7329](https://patchblox.com/security/data/cve/CVE-2018-7329.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addres... | n/a | 0.0213 |  |
| [CVE-2018-7330](https://patchblox.com/security/data/cve/CVE-2018-7330.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addres... | n/a | 0.0213 |  |
| [CVE-2018-9274](https://patchblox.com/security/data/cve/CVE-2018-9274.md) | Routine | wireshark-common: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_message.c has a memory leak. | n/a | 0.0213 |  |
| [CVE-2016-4078](https://patchblox.com/security/data/cve/CVE-2016-4078.md) | Routine | libwireshark11: The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict elemen... | n/a | 0.0212 |  |
| [CVE-2018-9265](https://patchblox.com/security/data/cve/CVE-2018-9265.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-tn3270.c has a memory leak. | n/a | 0.0212 |  |
| [CVE-2018-9273](https://patchblox.com/security/data/cve/CVE-2018-9273.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak. | n/a | 0.0212 |  |
| [CVE-2017-7700](https://patchblox.com/security/data/cve/CVE-2017-7700.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered... | n/a | 0.0210 |  |
| [CVE-2014-2907](https://patchblox.com/security/data/cve/CVE-2014-2907.md) | Routine | libwscodecs2: The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7... | n/a | 0.0209 |  |
| [CVE-2016-2522](https://patchblox.com/security/data/cve/CVE-2016-2522.md) | Routine | libwireshark11: The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshar... | n/a | 0.0208 |  |
| [CVE-2016-9372](https://patchblox.com/security/data/cve/CVE-2016-9372.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a cap... | n/a | 0.0207 |  |
| [CVE-2016-6513](https://patchblox.com/security/data/cve/CVE-2016-6513.md) | Routine | libwireshark11: epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion d... | n/a | 0.0206 |  |
| [CVE-2018-9266](https://patchblox.com/security/data/cve/CVE-2018-9266.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-isup.c has a memory leak. | n/a | 0.0202 |  |
| [CVE-2018-9271](https://patchblox.com/security/data/cve/CVE-2018-9271.md) | Routine | wireshark-common: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory leak. | n/a | 0.0202 |  |
| [CVE-2018-9272](https://patchblox.com/security/data/cve/CVE-2018-9272.md) | Routine | wireshark: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak. | n/a | 0.0202 |  |
| [CVE-2017-13766](https://patchblox.com/security/data/cve/CVE-2017-13766.md) | Routine | libwireshark11: In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write | n/a | 0.0200 |  |
| [CVE-2016-4077](https://patchblox.com/security/data/cve/CVE-2016-4077.md) | Routine | libwireshark11: epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case handling of truncated Tv... | n/a | 0.0200 |  |
| [CVE-2016-2526](https://patchblox.com/security/data/cve/CVE-2016-2526.md) | Routine | libwireshark11: epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data ty... | n/a | 0.0198 |  |
| [CVE-2017-13767](https://patchblox.com/security/data/cve/CVE-2017-13767.md) | Routine | libwireshark11: In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop | n/a | 0.0198 |  |
| [CVE-2018-9258](https://patchblox.com/security/data/cve/CVE-2018-9258.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash | n/a | 0.0191 |  |
| [CVE-2016-7957](https://patchblox.com/security/data/cve/CVE-2016-7957.md) | Routine | libwireshark11: In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file | n/a | 0.0190 |  |
| [CVE-2018-5334](https://patchblox.com/security/data/cve/CVE-2018-5334.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash | n/a | 0.0189 |  |
| [CVE-2018-5335](https://patchblox.com/security/data/cve/CVE-2018-5335.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash | n/a | 0.0189 |  |
| [CVE-2016-2524](https://patchblox.com/security/data/cve/CVE-2016-2524.md) | Routine | libwireshark11: epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID,... | n/a | 0.0187 |  |
| [CVE-2016-4083](https://patchblox.com/security/data/cve/CVE-2016-4083.md) | Routine | libwireshark11: epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not ensure that data is a... | n/a | 0.0184 |  |
| [CVE-2018-9257](https://patchblox.com/security/data/cve/CVE-2018-9257.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop | n/a | 0.0182 |  |
| [CVE-2017-17997](https://patchblox.com/security/data/cve/CVE-2017-17997.md) | Routine | libwireshark11: In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes | n/a | 0.0181 |  |
| [CVE-2016-4076](https://patchblox.com/security/data/cve/CVE-2016-4076.md) | Routine | libwireshark11: epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize... | n/a | 0.0175 |  |
| [CVE-2016-4415](https://patchblox.com/security/data/cve/CVE-2016-4415.md) | Routine | libwireshark11: wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet... | n/a | 0.0172 |  |
| [CVE-2018-7321](https://patchblox.com/security/data/cve/CVE-2018-7321.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed... | n/a | 0.0171 |  |
| [CVE-2018-7421](https://patchblox.com/security/data/cve/CVE-2018-7421.md) | Routine | libwireshark11: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop | n/a | 0.0170 |  |
| [CVE-2017-15189](https://patchblox.com/security/data/cve/CVE-2017-15189.md) | Routine | libwireshark-data: In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop | n/a | 0.0169 |  |
| [CVE-2017-15190](https://patchblox.com/security/data/cve/CVE-2017-15190.md) | Routine | libwireshark11: In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash | n/a | 0.0169 |  |
| [CVE-2015-0559](https://patchblox.com/security/data/cve/CVE-2015-0559.md) | Routine | libwireshark11: Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x be... | n/a | 0.0158 |  |
| [CVE-2015-0560](https://patchblox.com/security/data/cve/CVE-2015-0560.md) | Routine | libwireshark11: The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1... | n/a | 0.0158 |  |
| [CVE-2015-8718](https://patchblox.com/security/data/cve/CVE-2015-8718.md) | Routine | libwireshark11: Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and... | n/a | 0.0152 |  |
| [CVE-2015-3182](https://patchblox.com/security/data/cve/CVE-2015-3182.md) | Routine | libwscodecs2: epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a c... | n/a | 0.0148 |  |
| [CVE-2016-2527](https://patchblox.com/security/data/cve/CVE-2016-2527.md) | Routine | libwireshark11: wiretap/nettrace_3gpp_32_423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensur... | n/a | 0.0143 |  |
| [CVE-2014-4020](https://patchblox.com/security/data/cve/CVE-2014-4020.md) | Routine | libwireshark11: The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.... | n/a | 0.0141 |  |
| [CVE-2015-8734](https://patchblox.com/security/data/cve/CVE-2015-8734.md) | Routine | libwscodecs2: The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishand... | n/a | 0.0139 |  |
| [CVE-2015-8738](https://patchblox.com/security/data/cve/CVE-2015-8738.md) | Routine | libwireshark11: The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in W... | n/a | 0.0139 |  |
| [CVE-2015-8741](https://patchblox.com/security/data/cve/CVE-2015-8741.md) | Routine | libwireshark11: The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does no... | n/a | 0.0139 |  |
| [CVE-2015-8742](https://patchblox.com/security/data/cve/CVE-2015-8742.md) | Routine | libwireshark11: The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x befo... | n/a | 0.0139 |  |
| [CVE-2016-4417](https://patchblox.com/security/data/cve/CVE-2016-4417.md) | Routine | libwireshark11: Off-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1... | n/a | 0.0137 |  |
| [CVE-2016-4418](https://patchblox.com/security/data/cve/CVE-2016-4418.md) | Routine | libwireshark11: epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allow... | n/a | 0.0135 |  |
| [CVE-2016-4421](https://patchblox.com/security/data/cve/CVE-2016-4421.md) | Routine | libwireshark11: epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allow... | n/a | 0.0134 |  |
| [CVE-2015-8737](https://patchblox.com/security/data/cve/CVE-2015-8737.md) | Routine | libwireshark11: The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate th... | n/a | 0.0133 |  |
| [CVE-2016-7175](https://patchblox.com/security/data/cve/CVE-2016-7175.md) | Routine | libwireshark11: epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data,... | n/a | 0.0131 |  |
| [CVE-2017-11410](https://patchblox.com/security/data/cve/CVE-2017-11410.md) | Routine | libwireshark11: In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by... | n/a | 0.0129 |  |
| [CVE-2017-11411](https://patchblox.com/security/data/cve/CVE-2017-11411.md) | Routine | libwireshark11: In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory | n/a | 0.0129 |  |
| [CVE-2017-13764](https://patchblox.com/security/data/cve/CVE-2017-13764.md) | Routine | libwireshark11: In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference | n/a | 0.0124 |  |
| [CVE-2016-2529](https://patchblox.com/security/data/cve/CVE-2016-2529.md) | Routine | libwireshark11: The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2... | n/a | 0.0123 |  |
| [CVE-2018-14438](https://patchblox.com/security/data/cve/CVE-2018-14438.md) | Routine | libwireshark11: In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDa... | n/a | 0.0118 |  |
| [CVE-2017-9617](https://patchblox.com/security/data/cve/CVE-2017-9617.md) | Routine | libwireshark11: In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_o... | n/a | 0.0114 |  |
| [CVE-2017-9616](https://patchblox.com/security/data/cve/CVE-2017-9616.md) | Routine | wireshark-qt: In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box... | n/a | 0.0103 |  |
| [CVE-2016-2521](https://patchblox.com/security/data/cve/CVE-2016-2521.md) | Routine | libwireshark11: Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp in Wireshark... | n/a | 0.0040 |  |

---

Data as of 2026-11-12T19:57:06Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.