Multiple denial of service vulnerabilities in Wireshark

Description

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. These vulnerabilities can be exploited remotely via a specially designed files or packets.

Below is a complete list of vulnerabilities

1. Lack of certain length values size OpenFlow dissector;
2. Infinite loop at DTN dissector;
3. An improper handling of signature variable state tracking at AllJoyn dissector;
4. An improper private strings handling at DCERPC dissector;
5. Lack of I/O objects restrictions at Profinet I/O dissector.

Original advisories

• Wireshark foundation security advisories list

Related products

• Wireshark

CVE list

• CVE-2016-9376
  warning
• CVE-2016-9375
  warning
• CVE-2016-9374
  warning
• CVE-2016-9373
  warning
• CVE-2016-9372
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com