Multiple vulnerabilities in Wireshark 2.2.x

Описание

Multiple serious vulnerabilities have been found in Wireshark 2.2.x. Malicious users can exploit these vulnerabilities to cause a denial of service.

Below is a complete list of vulnerabilities:

1. A string validation error in DMP dissector can be exploited remotely via a malformed packet to cause a denial of service;
2. An error with a case where not all of the BTATT packets have the same encapsulation level in Bluetooth Attribute Protocol dissector can be exploited remotely via malformed packet to cause a denial of service;
3. Memory-allocation approach error in MBIM dissector can be exploited remotely via malformed packet to cause a denial of service;

---

Technical details

For all vulnerabilities denial of service is a crash

Vulnerability (3) can exhaust system memory

NB: Not every vulnerability already has CVSS rating, so cumulative CVSS rating can be not representative.

Первичный источник обнаружения

• CVE-2017-15193
  CVE-2017-15191
  CVE-2017-15192
  

Связанные продукты

• Wireshark

Список CVE

• CVE-2017-15191
  warning
• CVE-2017-15192
  warning
• CVE-2017-15193
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com