Wireshark Prior to 1.6.0 Multiple Denial of Service Vulnerabilities
BID:48150
Info
Wireshark Prior to 1.6.0 Multiple Denial of Service Vulnerabilities
| Bugtraq ID: | 48150 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 07 2011 12:00AM |
| Updated: | Mar 19 2015 08:52AM |
| Credit: | Andreas Heise and Mahdi M. Hossaini |
| Vulnerable: |
Wireshark Wireshark 1.4.7 Wireshark Wireshark 1.4.5 Wireshark Wireshark 1.4.4 Wireshark Wireshark 1.4.3 Wireshark Wireshark 1.4.2 Wireshark Wireshark 1.4.1 Wireshark Wireshark 1.2.17 Wireshark Wireshark 1.2.16 Wireshark Wireshark 1.2.12 Wireshark Wireshark 1.2.10 Wireshark Wireshark 1.2.9 Wireshark Wireshark 1.2.8 Wireshark Wireshark 1.2.7 Wireshark Wireshark 1.2.6 Wireshark Wireshark 1.2.5 Wireshark Wireshark 1.2.4 Wireshark Wireshark 1.2.3 Wireshark Wireshark 1.2.2 Wireshark Wireshark 1.2.1 Wireshark Wireshark 1.2 Wireshark Wireshark 1.0.15 Wireshark Wireshark 1.0.14 Wireshark Wireshark 1.0.13 Wireshark Wireshark 1.0.12 Wireshark Wireshark 1.0.11 Wireshark Wireshark 1.0.10 Wireshark Wireshark 1.0.9 Wireshark Wireshark 1.0.8 Wireshark Wireshark 1.0.7 Wireshark Wireshark 1.0.6 Wireshark Wireshark 1.0.5 Wireshark Wireshark 1.0.4 Wireshark Wireshark 1.0.3 Wireshark Wireshark 1.0.2 Wireshark Wireshark 1.0.1 Wireshark Wireshark 1.0 Wireshark Wireshark 0.99.8 Wireshark Wireshark 0.99.7 Wireshark Wireshark 0.99.6 Wireshark Wireshark 0.99.5 Wireshark Wireshark 0.99.4 Wireshark Wireshark 0.99.3 Wireshark Wireshark 0.99.2 Wireshark Wireshark 0.99.1 Wireshark Wireshark 0.99 Wireshark Wireshark 0.10.13 Wireshark Wireshark 0.10.8 Wireshark Wireshark 0.10.4 Wireshark Wireshark 0.10 Wireshark Wireshark 0.9.10 Wireshark Wireshark 0.9.6 Wireshark Wireshark 0.9.5 Wireshark Wireshark 0.9.2 Wireshark Wireshark 0.8.20 Wireshark Wireshark 0.8.16 Wireshark Wireshark 0.7.9 Wireshark Wireshark 0.6 Wireshark Wireshark 1.4.1 Wireshark Wireshark 1.4.0 Wireshark Wireshark 1.2.15 Wireshark Wireshark 1.2.14 Wireshark Wireshark 1.2.13 Wireshark Wireshark 1.2.12 Wireshark Wireshark 1.2.11 Wireshark Wireshark 1.0.16 |
| Not Vulnerable: |
Wireshark Wireshark 1.6.1 Wireshark Wireshark 1.6 Wireshark Wireshark 1.4.8 |
Discussion
Wireshark Prior to 1.6.0 Multiple Denial of Service Vulnerabilities
Wireshark is prone to multiple denial-of-service vulnerabilities.
An attacker can exploit these issues to crash the application, resulting in a denial-of-service condition.
Wireshark is prone to multiple denial-of-service vulnerabilities.
An attacker can exploit these issues to crash the application, resulting in a denial-of-service condition.
Exploit / POC
Wireshark Prior to 1.6.0 Multiple Denial of Service Vulnerabilities
Attackers can use readily available tools to exploit these issues.
Attackers can use readily available tools to exploit these issues.
Solution / Fix
Wireshark Prior to 1.6.0 Multiple Denial of Service Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Wireshark Prior to 1.6.0 Multiple Denial of Service Vulnerabilities
References:
References:
- Bug 1759 - Traffic from NamedPipes can not be stopped. (Wireshark)
- Bug 4273 - crash when sorting column during capturing (Wireshark)
- Wireshark 1.6.0 Release Notes (Wireshark)
- Wireshark 1.6.1 and 1.4.8 Released (Wireshark)
- Wireshark Homepage (Wireshark)