The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade wiresharkUpgrade wireshark-develUpgrade wireshark-gnome | Dec 1, 2016 | Apr 29, 2011 |
| Debian | — | Upgrade wireshark | Jul 30, 2024 | Apr 29, 2011 |
| Gentoo Linux | — | Upgrade net-analyzer/wireshark. | Oct 30, 2017 | Apr 29, 2011 |
| Oracle_linux | — | Upgrade wiresharkUpgrade wireshark-gnomeUpgrade wireshark-devel | Oct 16, 2024 | Apr 29, 2011 |
| Suse | — | Upgrade wiresharkUpgrade libwiretap16Upgrade libwireshark8Upgrade libwireshark18Upgrade libwiretap6Upgrade libwiretap15Upgrade wireshark-develUpgrade libwscodecs1Upgrade libwsutil17Upgrade libwsutil7Upgrade libwsutil16Upgrade libwsutil8Upgrade wireshark-gtkUpgrade libwireshark9Upgrade libwireshark19Upgrade libwiretap7Upgrade wireshark-ui-qt | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Apr 29, 2011 |
| Wireshark | — | Upgrade to Wireshark version 1.4.5Upgrade to Wireshark version 1.2.16 | May 3, 2018 | Apr 29, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub