KLA11428 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. An unspecified vulnerability in ASN.1 BER can be exploited remotely via malformed packet to cause denial of service;
2. An unspecified vulnerability in TCAP dissector can be exploited remotely via malformed packet to cause denial of service;
3. An unspecified vulnerability in RPCAP dissector can be exploited remotely via malformed packet to cause denial of service.

Original advisories

wnpa-sec-2019-06

wnpa-sec-2019-07

wnpa-sec-2019-08

Related products

Wireshark

CVE list

CVE-2019-9209 warning

CVE-2019-9208 warning

CVE-2019-9214 warning

Solution

Update to the latest version

Get Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 2.6.x earlier than 2.6.7Wireshark 2.4.x earlier than 2.4.13