Multiple vulnerabilities in Wireshark

Description

Multiple vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities remotely to cause a denial of service via a specially crafted packet trace file.

Below is a complete list of vulnerabilities

1. The de_emerg_num_list function and the de_bcd_num function in epan/dissectors/packet-gsm_a_dtap.c file in the GSM DTAP dissector component check digit characters improperly
2. The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c file in the WCCP dissector component checks memory size for storing IP address strings improperly

Original advisories

• Wireshark security advisory

• Wireshark security advisory

Related products

• Wireshark

CVE list

• CVE-2015-4651
  critical
• CVE-2015-4652
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com