KLA11377
Multiple vulnerabilities in Wireshark
Updated: 12/04/2018
CVSS
?
5.9
Detect date
?
11/27/2018
Severity
?
Warning
Description

Multiple serious vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. A heap buffer over-read vulnerability in the Wireshark dissection engine can be exploited remotely via malformed packet to cause denial of service;
  2. An improper null termination vulnerability in the DCOM dissector can be exploited remotely via malformed packet to cause denial of service;
  3. An improper input validation vulnerability in the LBMPDM dissector can be exploited remotely via malformed packet to cause denial of service and bypass security restrictions;
  4. An infinite loop vulnerability in the MMSE dissector can be exploited remotely via malformed packet to cause denial of service;
  5. A heap buffer overflow vulnerability in the IxVeriWave file parser can be exploited remotely via malformed packet to cause denial of service;
  6. A NULL pointer dereference vulnerability in the PVFS dissector can be exploited remotely via malformed packet to cause denial of service;
  7. A division by zero vulnerability in the ZigBee ZCL dissector can be exploited remotely via malformed packet to cause denial of service;
Affected products

Wireshark 2.6.x earlier than 2.6.5
Wireshark 2.4.x earlier than 2.4.11

Solution

Update to the latest version
Get Wireshark

Original advisories

wnpa-sec-2018-51
wnpa-sec-2018-52
wnpa-sec-2018-53
wnpa-sec-2018-54
wnpa-sec-2018-55
wnpa-sec-2018-56
wnpa-sec-2018-57

Impacts
?
DoS 
[?]

SB 
[?]
Related products
Wireshark
CVE-IDS
?

CVE-2018-19625
CVE-2018-19626
CVE-2018-19623
CVE-2018-19622
CVE-2018-19627
CVE-2018-19624
CVE-2018-19628