Kaspersky ID:
KLA11114
Дата обнаружения:
10/10/2017
Обновлено:
22/01/2024

Описание

Multiple serious vulnerabilities have been found in Wireshark 2.4.x. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

  1. An infinite loop in the DOCSIS dissector can be exploited remotely via a malformed packet to cause a denial of service;
  2. A stack overflow in RTSP dissector can be exploited remotely via malformed packet to cause a denial of service;
  3. A string validation error in DMP dissector can be exploited remotely via a malformed packet to cause a denial of service;
  4. An error with a case where not all of the BTATT packets have the same encapsulation level in Bluetooth Attribute Protocol dissector can be exploited remotely via malformed packet to cause a denial of service;
  5. Memory-allocation approach error in MBIM dissector can be exploited remotely via malformed packet to cause a denial of service;

Technical details

For all vulnerabilities denial of service is a crash

Vulnerability (5) can exhaust system memory

NB: Not every vulnerability already has CVSS rating, so cumulative CVSS rating can be not representative.

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2017-15191
    warning
  • CVE-2017-15192
    warning
  • CVE-2017-15193
    critical
  • CVE-2017-15189
    warning
  • CVE-2017-15190
    warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Узнай больше об угрозах и векторах атаки на Энциклопедии Kaspersky
Бесплатно
Читать
Kaspersky Premium
Комплексное решение для защиты вашей цифровой жизни
Премиум
Скачать
Confirm changes?
Your message has been sent successfully.