KLA12079 DoS vulnerabilties in Wireshark

DoS vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. DoS vulnerability in the BLIP dissector can be exploited via special crafted file to cause denial of service.
2. DoS vulnerability in the MIME Multipart dissector can be exploited via special crafted file to cause denial of service.
3. DoS vulnerability in the TCP dissector can be exploited via special crafted file to cause denial of service.

Original advisories

wnpa-sec-2020-13 · BLIP dissector crash

wnpa-sec-2020-11 · MIME Multipart dissector crash

wnpa-sec-2020-12 · TCP dissector crash

Related products

Wireshark

CVE list

CVE-2020-25866 critical

CVE-2020-25863 critical

CVE-2020-25862 critical

Solution

Update to the latest version

Download Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 2.6.x earlier than 2.6.20Wireshark 3.0.x earlier than 3.0.14 Wireshark 3.2.x earlier than 3.2.7