KLA12354 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in IEEE 802.11 dissector can be exploited via special crafted packet to cause denial of service.
2. Denial of service vulnerability in Bluetooth DHT dissector can be exploited via special crafted packet to cause denial of service.
3. Denial of service vulnerability in Modbuss dissector can be exploited via special crafted packet to cause denial of service.
4. Denial of service vulnerability in C12.22 dissector can be exploited via special crafted packet to cause denial of service.
5. Denial of service vulnerability in Bluetooth SDP dissector can be exploited via special crafted packet to cause denial of service.
6. Denial of service vulnerability in PNRP dissector can be exploited via special crafted packet to cause denial of service.

Original advisories

Bluetooth DHT dissector large loop

Bluetooth DHT dissector crash

Bluetooth SDP dissector crash

IEEE 802.11 dissector crash

C12.22 dissector crash

Modbus dissector crash

PNRP dissector large loop

Related products

Wireshark

CVE list

CVE-2021-39928 critical

CVE-2021-39924 critical

CVE-2021-39921 critical

CVE-2021-39922 critical

CVE-2021-39929 critical

CVE-2021-39925 critical

CVE-2021-39923 critical

Solution

Update to the latest version

Download Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 3.4.x earlier than 3.4.10Wireshark 3.2.x earlier than 3.2.18