Kaspersky Threats

Description

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

An improper operand validation offsets in the SIGCOMP protocol dissector can be exploited remotely via malformed packet trace file to cause denial of service;
Infinite loops in multiple dissectors can be exploited remotely via malformed packet to cause denial of service;
An improper certain types of packets handling in the UMTS MAC dissector can be exploited remotely via malformed packet to cause denial of service;
An improper certain types of packets handling in the IEEE 802.11 dissector can be exploited remotely via malformed packet to cause denial of service;
An improper certain types of packets handling in the FCP protocol dissector can be exploited remotely via malformed packet to cause denial of service;
An improper certain types of packets handling in the DOCSIS dissector can be exploited remotely via malformed packet to cause denial of service;
An unspecified vulnerability in pcapng file parser can be exploited remotely via malformed packet to cause denial of service;
An unspecified vulnerability in the IPMI dissector can be exploited remotely via malformed packet to cause denial of service;
An unspecified vulnerability in the SIGCOMP dissector can be exploited remotely via malformed packet to cause denial of service;
An unspecified vulnerability in the NBAP dissector can be exploited remotely via malformed packet to cause denial of service;

Public exploits exist for this vulnerability.

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!