KLA11377
Multiple vulnerabilities in Wireshark
Обновлено: 04/12/2018
CVSS
5.9
Дата обнаружения
27/11/2018
Уровень угрозы
Warning
Описание

Multiple serious vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. A heap buffer over-read vulnerability in the Wireshark dissection engine can be exploited remotely via malformed packet to cause denial of service;
  2. An improper null termination vulnerability in the DCOM dissector can be exploited remotely via malformed packet to cause denial of service;
  3. An improper input validation vulnerability in the LBMPDM dissector can be exploited remotely via malformed packet to cause denial of service and bypass security restrictions;
  4. An infinite loop vulnerability in the MMSE dissector can be exploited remotely via malformed packet to cause denial of service;
  5. A heap buffer overflow vulnerability in the IxVeriWave file parser can be exploited remotely via malformed packet to cause denial of service;
  6. A NULL pointer dereference vulnerability in the PVFS dissector can be exploited remotely via malformed packet to cause denial of service;
  7. A division by zero vulnerability in the ZigBee ZCL dissector can be exploited remotely via malformed packet to cause denial of service;
Пораженные продукты

Wireshark 2.6.x earlier than 2.6.5
Wireshark 2.4.x earlier than 2.4.11

Решение

Update to the latest version
Get Wireshark

Первичный источник обнаружения
wnpa-sec-2018-51
wnpa-sec-2018-52
wnpa-sec-2018-53
wnpa-sec-2018-54
wnpa-sec-2018-55
wnpa-sec-2018-56
wnpa-sec-2018-57
Оказываемое влияние
?
DoS 
[?]

SB 
[?]
Связанные продукты
Wireshark
CVE-IDS

CVE-2018-19625
CVE-2018-19626
CVE-2018-19623
CVE-2018-19622
CVE-2018-19627
CVE-2018-19624
CVE-2018-19628