DoS vulnerabilities in Wireshark

Description

DoSvulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. DoS vulnerability in the Kafka dissector can be exploited via special crafted file to cause denial of service.
2. DoS vulnerability in dissectors can be exploited via special crafted file to cause denial of service.
3. DoS vulnerability in the RTPS dissector can be exploited via special crafted file to cause denial of service.
4. DoS vulnerability in the USB HID and possibly other dissectors can be exploited via special crafted file to cause denial of service.

Original advisories

• wnpa-sec-2020-16 · Kafka dissector memory leak

• wnpa-sec-2020-19 · Multiple dissector memory leak
• wnpa-sec-2020-18 · RTPS dissector memory leak
• wnpa-sec-2020-17 · USB HID dissector crash

Related products

• Wireshark

CVE list

• CVE-2020-26418
  high
• CVE-2020-26419
  high
• CVE-2020-26420
  high
• CVE-2020-26421
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com