DoS vulnerabilties in Wireshark

Description

DoS vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. DoS vulnerability in the BLIP dissector can be exploited via special crafted file to cause denial of service.
2. DoS vulnerability in the MIME Multipart dissector can be exploited via special crafted file to cause denial of service.
3. DoS vulnerability in the TCP dissector can be exploited via special crafted file to cause denial of service.

Original advisories

• wnpa-sec-2020-13 · BLIP dissector crash

• wnpa-sec-2020-11 · MIME Multipart dissector crash
• wnpa-sec-2020-12 · TCP dissector crash

Exploitation

Public exploits exist for this vulnerability.

Related products

• Wireshark

CVE list

• CVE-2020-25866
  critical
• CVE-2020-25863
  critical
• CVE-2020-25862
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com