Wireshark LBMR Dissector CVE-2015-3809 Remote Denial of Service Vulnerability

Bugtraq ID:	74632
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-3809
Remote:	Yes
Local:	No
Published:	May 12 2015 12:00AM
Updated:	Dec 07 2015 10:17PM
Credit:	Vlad Tsyrklevich
Vulnerable:	Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Wireshark LBMR Dissector CVE-2015-3809 Remote Denial of Service Vulnerability

Wireshark is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause the application to enter an infinite loop and consume excessive CPU resources, resulting in denial-of-service conditions.

Wireshark versions 1.12.0 through 1.12.4 are vulnerable.

Wireshark LBMR Dissector CVE-2015-3809 Remote Denial of Service Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.

Wireshark LBMR Dissector CVE-2015-3809 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark LBMR Dissector CVE-2015-3809 Remote Denial of Service Vulnerability

References:

• Bug 11036 - Infinite loop DoS in LBMR dissector (wireshark)
  
• Wireshark Homepage (Wireshark)
  
• wnpa-sec-2015-12 · LBMR infinite loop (Wireshark)