KLA10701 Denial of service vulnerability in Wireshark

Redundant indirection was found in Wireshark. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed packet.

Technical details

This vulnerability caused by pcapng_read_if_descr_block function in wiretap/pcapng.c (pcapng pareser) and can be triggered via packet which triggers interface-filter copying.

Original advisories

Wireshark advisory

Related products

Wireshark

CVE list

CVE-2015-7830 warning

Solution

Update to the latest version

Get Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark versions earlier than 1.12.8