KLA10400 DoS vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities

1. Improper handling of n and r symbols can be exploited remotely via a specially designed packet;
2. Improper initialization of the buffer and other structures can be exploited via a specially designed packet.

Original advisories

Related products

Wireshark

CVE list

CVE-2014-5161 critical

CVE-2014-5162 critical

CVE-2014-5163 critical

CVE-2014-5164 critical

CVE-2014-5165 critical

Solution

Update to latest version

Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark versions 1.10 before 1.10.8