Wireshark NBAP Dissector Multiple Denial of Service Vulnerabilities

Bugtraq ID:	60502
Class:	Design Error
CVE:	CVE-2013-4077
Remote:	Yes
Local:	No
Published:	Jun 10 2013 12:00AM
Updated:	Apr 13 2015 09:44PM
Credit:	Wireshark
Vulnerable:	Wireshark Wireshark 1.8.7 Wireshark Wireshark 1.8.6 Wireshark Wireshark 1.8.5 Wireshark Wireshark 1.8.4 Wireshark Wireshark 1.8.3 Wireshark Wireshark 1.8.2 Wireshark Wireshark 1.8.1 Wireshark Wireshark 1.8.0 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	Wireshark Wireshark 1.8.8

Wireshark NBAP Dissector Multiple Denial of Service Vulnerabilities

Wireshark is prone to multiple denial-of-service vulnerabilities.

An attacker can leverage these issues to crash the affected application, denying service to legitimate users.

Note: These issues was previously discussed in BID 60448 (Wireshark Multiple Buffer Overflow and Denial of Service), but has been moved to its own record for better documentation.

Wireshark versions 1.8.0 through 1.8.7 are vulnerable.

Wireshark NBAP Dissector Multiple Denial of Service Vulnerabilities

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.

Wireshark NBAP Dissector Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark NBAP Dissector Multiple Denial of Service Vulnerabilities

References:

• Bug 8697 - Buildbot crash output: fuzz-2013-05-18-22876.pcap (Wireshark)
  
• Revision 49418 (Wireshark)
  
• Wireshark 1.8.8 Release Notes (Wireshark)
  
• Wireshark Homepage (Wireshark)
  
• wnpa-sec-2013-35 (Wireshark)