KLA10649 Denial of service vulnerabilities in Wireshark

An unspecified vulnerabilities were found in Wireshark. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via a specially designed file or network packet.

Technical details

This vulnerability related to next conditions:

1. Adding item to protocol tree;
2. Ptvcursor length checking;
3. WCCP, OpenFlow, GSM RLC/MAC, ZigBee, WaveAgent dissectors acting;
4. Attempt to free invalid memory;
5. Searching protocol dissector.

As result of exploitation there are two kinds DoS: crash or consume excessive CPU resources.

Original advisories

Wireshark Security Advisories

Related products

Wireshark

CVE list

CVE-2015-6246 warning

CVE-2015-6245 warning

CVE-2015-6241 warning

CVE-2015-6242 warning

CVE-2015-6248 warning

CVE-2015-6247 warning

CVE-2015-6249 warning

CVE-2015-6244 warning

CVE-2015-6243 warning

Solution

Update to the latest version

Get Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark versions earlier than 1.12.7