KLA11073 Denial of service vulnerability in Wireshark

A large loop vulnerability was found in the GPRS LLC dissector in Wireshark. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited remotely via a specially designed packet, which is injected onto the wire, or by convincing a user to read a specially designed packet trace file to cause a denial of service.

Technical details

Denial of service, which might become a result of exploiting vulnerability described above, occurs because of consuming excessive CPU resources.

Original advisories

wnpa-sec-2017-37

Related products

Wireshark

CVE list

CVE-2017-11409 critical

Solution

Update to the latest version

Download Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 2.0.x before 2.0.14