Beschreibung
Multiple serious vulnerabilities have been found in Wireshark 2.0.0 to 2.0.9 and 2.2.0 to 2.2.3. Malicious users can exploit these vulnerabilities to possibly cause a denial of service.
Below is a complete list of vulnerabilities:
- The DHCPv6 dissector large loop vulnerability can be exploited remotely via a malformed captured file or a packet injection to consume excessive CPU and possibly cause a denial of service;
- The ASTERIX dissector infinite loop vulnerability can be exploited remotely via a malformed captured file or a packet injection to consume excessive CPU and possibly cause a denial of service.
Technical details
Vulnerability (1) is related to the file epan/dissectors/packet-dhcpv6.c.
Vulnerability (2) is related to file epan/dissectors/packet-asterix.c.
Ursprüngliche Informationshinweise
CVE Liste
- CVE-2017-5597 warning
- CVE-2017-5596 warning
Mehr erfahren
Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com
Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!