Denial of service vulnerabilities in Wireshark

Description

An unspecified vulnerabilities were found in Wireshark. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via a specially designed file or network packet.

---

Technical details

This vulnerability related to next conditions:

1. Adding item to protocol tree;
2. Ptvcursor length checking;
3. WCCP, OpenFlow, GSM RLC/MAC, ZigBee, WaveAgent dissectors acting;
4. Attempt to free invalid memory;
5. Searching protocol dissector.

As result of exploitation there are two kinds DoS: crash or consume excessive CPU resources.

Original advisories

• Wireshark Security Advisories

Related products

• Wireshark

CVE list

• CVE-2015-6246
  warning
• CVE-2015-6245
  warning
• CVE-2015-6241
  warning
• CVE-2015-6242
  warning
• CVE-2015-6248
  warning
• CVE-2015-6247
  warning
• CVE-2015-6249
  warning
• CVE-2015-6244
  warning
• CVE-2015-6243
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com