KLA11151 Denial of service vulnerabilities in Wireshark

Multiple vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities remotely to cause a denial of service via injecting a malformed packet.

Technical details

This vulnerabilities related to next services:

1. NetBIOS dissector;
2. IWARP_MPA dissector;
3. CIP Safety dissector;

NB: This vulnerability does not have any public CVSS rating, so rating can be changed by the time.

Original advisories

Wireshark security advisory

Wireshark security advisory

Wireshark security advisory

Exploitation

Public exploits exist for this vulnerability.

Related products

Wireshark

CVE list

CVE-2017-17085 warning

CVE-2017-17083 warning

CVE-2017-17084 warning

Solution

Update to the latest version

Get Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark versions from 2.4.0 to 2.4.2 and versions from 2.2.0 to 2.2.10