RETIRED: Wireshark DCP ETSI Dissector NULL Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	60000
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 17 2013 12:00AM
Updated:	Apr 13 2015 10:25PM
Credit:	Evan Jensen
Vulnerable:	Wireshark Wireshark 1.8.6 Wireshark Wireshark 1.8.5 Wireshark Wireshark 1.8.4 Wireshark Wireshark 1.8.3 Wireshark Wireshark 1.8.2 Wireshark Wireshark 1.8.1 Wireshark Wireshark 1.8.0 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	Wireshark Wireshark 1.8.7

RETIRED: Wireshark DCP ETSI Dissector NULL Pointer Dereference Denial of Service Vulnerability

Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.

Attackers can exploit this issue to cause the application to crash, resulting in denial-of-service conditions.

Wireshark 1.8.0 through versions 1.8.6 are affected.

NOTE: This BID is being retired as a duplicate of BID 59995 (Wireshark DCP ETSI Dissector 'dissect_pft_fec_detailed()' Denial of Service Vulnerability)

RETIRED: Wireshark DCP ETSI Dissector NULL Pointer Dereference Denial of Service Vulnerability

A sample pcap file is available. Please see the references for information.

RETIRED: Wireshark DCP ETSI Dissector NULL Pointer Dereference Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Wireshark DCP ETSI Dissector NULL Pointer Dereference Denial of Service Vulnerability

References:

• DCP ETSI dissector crash (Wireshark)
  
• Wireshark Homepage (Wireshark)
  
• Bug 8540 - Integer Overflow -> Null Pointer Dereference packet-dcp-etsi.c (Wireshark)