Searching
..

Click anywhere to stop

KLA11377
Multiple vulnerabilities in Wireshark

Обновлено: 22/01/2024
Дата обнаружения
27/11/2018
Уровень угрозы
Warning
Описание

Multiple serious vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. A heap buffer over-read vulnerability in the Wireshark dissection engine can be exploited remotely via malformed packet to cause denial of service;
  2. An improper null termination vulnerability in the DCOM dissector can be exploited remotely via malformed packet to cause denial of service;
  3. An improper input validation vulnerability in the LBMPDM dissector can be exploited remotely via malformed packet to cause denial of service and bypass security restrictions;
  4. An infinite loop vulnerability in the MMSE dissector can be exploited remotely via malformed packet to cause denial of service;
  5. A heap buffer overflow vulnerability in the IxVeriWave file parser can be exploited remotely via malformed packet to cause denial of service;
  6. A NULL pointer dereference vulnerability in the PVFS dissector can be exploited remotely via malformed packet to cause denial of service;
  7. A division by zero vulnerability in the ZigBee ZCL dissector can be exploited remotely via malformed packet to cause denial of service;
Пораженные продукты

Wireshark 2.6.x earlier than 2.6.5
Wireshark 2.4.x earlier than 2.4.11

Решение

Update to the latest version
Get Wireshark

Первичный источник обнаружения
wnpa-sec-2018-51
wnpa-sec-2018-52
wnpa-sec-2018-53
wnpa-sec-2018-54
wnpa-sec-2018-55
wnpa-sec-2018-56
wnpa-sec-2018-57
Оказываемое влияние
?
DoS 
[?]

SB 
[?]
Связанные продукты
Wireshark
CVE-IDS
CVE-2018-196254.3Warning
CVE-2018-196264.3Warning
CVE-2018-196235.0Warning
CVE-2018-196225.0Warning
CVE-2018-196275.0Warning
CVE-2018-196244.3Warning
CVE-2018-196285.0Warning
Эксплуатация

Public exploits exist for this vulnerability.

Узнай статистику распространения уязвимостей в твоем регионе