Beschreibung
Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.
Below is a complete list of vulnerabilities:
- A recursion depth error in epan/tvbparse.c can be exploited remotely via a malformed packet to cause denial of service;
- An validating error in in epan/dissectors/packet-mrdisc.c can be exploited remotely via a malformed packet to cause denial of service;
- A bounds check error in wiretap/vwr.c can be exploited remotely via a malformed packet to cause denial of service;
- Buffer length validating error in in epan/dissectors/packet-wcp.c can be exploited remotely via a malformed packet to cause denial of service;
Technical details
Vulnerability (2) affects only Wireshark 2.2.x versions
NB: This vulnerability does not have any public CVSS rating, so rating can be changed by the time.
Ursprüngliche Informationshinweise
CVE Liste
- CVE-2018-5334 warning
- CVE-2018-5336 warning
- CVE-2018-5335 warning
- CVE-2017-17997 warning
Mehr erfahren
Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com
Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!