Security Advisories
The following Wireshark releases fix serious security vulnerabilities. If you are running a vulnerable version of Wireshark you should consider upgrading.
- Fixed in Wireshark 1.2.5:
LWRES vulnerability in Wireshark
® versions 0.9.0 to 1.0.10, 1.2.0 to 1.2.5 - Fixed in Wireshark 1.0.11:
Multiple problems in Wireshark
® versions 0.9.0 to 1.0.10, 1.2.0 to 1.2.5 - Fixed in Wireshark 1.2.5:
Multiple problems in Wireshark
® versions 0.9.0 to 1.2.4 - Fixed in Wireshark 1.0.10:
Multiple problems in Wireshark
® versions 0.10.10 to 1.0.9 - Fixed in Wireshark 1.2.3:
Multiple problems in Wireshark
® versions 0.10.10 to 1.0.9, 1.2.0 to 1.2.2 - Fixed in Wireshark 1.2.2:
Multiple problems in Wireshark
® versions 0.99.6 to 1.2.1 - Fixed in Wireshark 1.2.1:
Multiple problems in Wireshark
® versions 0.9.2 to 1.2.0 - Fixed in Wireshark 1.0.10:
Multiple problems in Wireshark
® versions 0.10.10 to 1.0.9, 1.2.0 to 1.2.2 - Fixed in Wireshark 1.0.9:
Multiple problems in Wireshark
® versions 0.9.2 to 1.0.8 - Fixed in Wireshark 1.0.8:
Multiple problems in Wireshark
® versions 0.8.20 to 1.0.7 - Fixed in Wireshark 1.0.7:
Multiple problems in Wireshark
® versions 0.9.6 to 1.0.6 - Fixed in Wireshark 1.0.6:
Multiple problems in Wireshark
® versions 0.99.6 to 1.0.5 - Fixed in Wireshark 1.0.5:
Multiple problems in Wireshark
® versions 0.99.0 to 1.0.4 - Fixed in Wireshark 1.0.4:
Multiple problems in Wireshark
® versions 0.10.3 to 1.0.3 - Fixed in Wireshark 1.0.3:
Multiple problems in Wireshark
® versions 0.9.7 to 1.0.2 - Fixed in Wireshark 1.0.2:
Multiple problems in Wireshark
® versions 0.8.19 to 1.0.1 - Fixed in Wireshark 1.0.1:
Multiple problems in Wireshark
® versions 0.9.5 to 1.0.0 - Fixed in Wireshark 1.0.0:
Multiple problems in Wireshark
® versions 0.99.2 to 0.99.8 - Fixed in Wireshark 0.99.8:
Multiple problems in Wireshark (formerly
Ethereal
® ) versions 0.6.0 to 0.99.7 - Fixed in Wireshark 0.99.7: Multiple problems in Wireshark (formerly Ethereal) versions 0.9.14 to 0.99.6
- Fixed in Wireshark 0.99.6: Multiple problems in Wireshark (formerly Ethereal) versions 0.8.20 to 0.99.5
- Fixed in Wireshark 0.99.5: Multiple problems in Wireshark (formerly Ethereal) versions 0.10.14 to 0.99.4
- Fixed in Wireshark 0.99.4: Multiple problems in Wireshark (formerly Ethereal) versions 0.9.8 to 0.99.3
- Fixed in Wireshark 0.99.3: Multiple vulnerabilities in Wireshark 0.99.2 and Ethereal 0.7.9 to 0.99.0
- Fixed in Wireshark 0.99.2: Multiple vulnerabilities in Ethereal 0.8.14 to 0.99.0
Reporting Security Problems
If you've found a security problem with Wireshark we want to hear about it. You can let us know about security-related issues via the following channels:
- Email: security[AT]wireshark.org. In cases where confidentiality is a concern, you can use our GPG key (id 0x21F2949A).
- Web: Our bug tracking system. Bugs can be marked "private" if needed.
- Telephone: Contact CACE Technologies at +1.530.758.2790.