Wireshark bug bounty programs

Wireshark programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
WI Wireshark Sorona · Bug bounty	–	–	–	$100	$1,500	Partial	–	–	Open

• WI

  Wireshark

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100

  Safe harbor

  Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• https://www.wireshark.org

  Web

• The command-line tools as well as the GUI, tshark and dumpcap included, and the privileged capture path that historically holds elevated capabilities

  Products and areas

• The epan core itself: the dissection engine, the tvbuff buffer abstraction, and address and value-string handling

  Products and areas

• The extension surface, covering the Lua scripting bindings and the extcap plugin interface, where external code and configuration cross into the dissection engine

  Products and areas

• The whole dissector corpus in epan/dissectors, roughly three thousand of them, every one parsing fully attacker-controlled bytes

  Products and areas

• The Wireshark security team takes reports at [email protected] and publishes its own advisories alongside a scheduled release. The covered object is the Wireshark tree itself, with no boundary drawn narrower than that

  Products and areas

• The wiretap capture-file library in full, covering pcap, pcapng, ERF, Netscaler, K12 and dozens of vendor formats, which run before any dissector does

  Products and areas

No target matches. Try part of a host name, such as the company name.