Denial of service vulnerabilities in Wireshark

Описание

Multiple serious vulnerabilities have been found in Wireshark version 2.2.7. Malicious users can exploit these vulnerabilities to cause a denial of service.

Below is a complete list of vulnerabilities:

1. A stack exhaustion vulnerability in the DAAP dissector can be exploited remotely via a specially designed DAAP data to cause a denial of service;
2. A stack exhaustion vulnerability in the MP4 dissector can be exploited remotely via a specially designed MP4 data to cause a denial of service.

---

Technical details

Vulnerability (1) is related to the dissect_daap_one_tag() function in epan/dissectors/packet-daap.c.

Vulnerability (1) is related to the dissect_mp4_box() function in epan/dissectors/file-mp4.c.

Первичный источник обнаружения

• Wireshark Bug Database
  Wireshark Bug Database
  

Связанные продукты

• Wireshark

Список CVE

• CVE-2017-9617
  warning
• CVE-2017-9616
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com