Multiple vulnerabilities in Wireshark

Описание

Multiple vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities remotely to cause a denial of service via a specially crafted packet trace file.

Below is a complete list of vulnerabilities

1. The de_emerg_num_list function and the de_bcd_num function in epan/dissectors/packet-gsm_a_dtap.c file in the GSM DTAP dissector component check digit characters improperly
2. The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c file in the WCCP dissector component checks memory size for storing IP address strings improperly

Первичный источник обнаружения

• Wireshark security advisory
  Wireshark security advisory
  

Связанные продукты

• Wireshark

Список CVE

• CVE-2015-4651
  critical
• CVE-2015-4652
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com