Multiple denial of service vulnerabilities in Wireshark

Описание

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. These vulnerabilities can be exploited remotely via a specially designed files or packets.

Below is a complete list of vulnerabilities

1. Lack of certain length values size OpenFlow dissector;
2. Infinite loop at DTN dissector;
3. An improper handling of signature variable state tracking at AllJoyn dissector;
4. An improper private strings handling at DCERPC dissector;
5. Lack of I/O objects restrictions at Profinet I/O dissector.

Первичный источник обнаружения

• Wireshark foundation security advisories list
  

Связанные продукты

• Wireshark

Список CVE

• CVE-2016-9376
  warning
• CVE-2016-9375
  warning
• CVE-2016-9374
  warning
• CVE-2016-9373
  warning
• CVE-2016-9372
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com