KLA11020
Multiple vulnerabilities in Wireshark
Updated: 11/06/2018
CVSS
?
7.8
Detect date
?
04/12/2017
Severity
?
Critical
Description

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause a denial of  service.

Below is a complete list of vulnerabilities:

  1. An unspecified vulnerability in the IMAP (Internet Message Access Protocol) dissector can be exploited remotely via a specially designed packet, which is injected onto the wire, or by convincing a user to handle a specially designed packet trace file to cause a denial of sevice;
  2. An unspecified vulnerability in the WBXML (WAP Binary XML Protocol) dissector and in the BGP (Border Gateway) dissector can be exploited remotely via specially designed packet, which is injected onto the wire, or by convincing a user to handle a specially designed packet trace file to make an infinite loop and possibly cause a denial of sevice;
  3. An unspecified vulnerability in the NetScaler file parser can be exploited remotely by convincing a user to handle a specially designed packet trace file to make an infinite loop and possibly cause a denial of sevice;
  4. An unspecified vulnerability in the RPC (Remote Procedure Call Protocols) over RDMA (Remote Direct Memory Access Protocol) dissector can be exploited remotely by convincing a user to handle a specially designed packet trace file to make an infinite loop and possibly cause a denial of sevice;
  5. An unspecified vulnerability in the BGP (Border Gateway) dissector can be exploited remotely via a specially designed packet, which is injected onto the wire, or by convincing a user to handle a specially designed packet trace file possibly to cause a denial of sevice;
  6. Multiple unspecified vulnerabilities in the DOF dissector, in the PacketBB dissector and in the SLSK dissector can be exploited remotely via a specially designed packet, which is injected onto the wire, or by convincing a user to handle a specially designed packet trace file possibly to cause a denial of sevice;
  7. Multiple unspecified vulnerabilities in the SIGCOMP (Signaling Compression) dissector and in the WSP (Wireless Session Protocol) dissector can be exploited remotely via a specially designed packet, which is injected onto the wire, or by convincing a user to handle a specially designed packet trace file possibly to cause a denial of sevice.
Affected products

Wireshark 2.0.x before 2.0.12
Wireshark 2.2.x before 2.2.6

Solution

Update to the latest versions
Download Wireshark

Original advisories

wnpa-sec-2017-14
wnpa-sec-2017-18
wnpa-sec-2017-20
wnpa-sec-2017-21
wnpa-sec-2017-12
wnpa-sec-2017-17
wnpa-sec-2017-16
wnpa-sec-2017-19
wnpa-sec-2017-13
wnpa-sec-2017-15

Impacts
?
DoS 
[?]
Related products
Wireshark
CVE-IDS
?

CVE-2017-7705
CVE-2017-7704
CVE-2017-7703
CVE-2017-7702
CVE-2017-7701
CVE-2017-7700