Wireshark Multiple Vulnerabilities
Last Update Date:
4 Oct 2012 15:00
Release Date:
4 Oct 2012
4962
Views
RISK: Medium Risk
TYPE: Security software and application - Security Software & Appliance
Multiple vulnerabilities have been identified in Wireshark. A remote user can cause denial of service conditions.
- A remote user can send specially crafted HSRP data to cause the target dissector to enter an infinite loop.
- A remote user can send specially crafted PPP data to cause the target dissector to crash.
- A remote user can send specially crafted LDP data to trigger a buffer overflow and cause the target dissector to crash.
Impact
- Denial of Service
System / Technologies affected
- Versions prior to 1.8.3
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- The vendor has issued a fix (1.8.3).
http://www.wireshark.org/security/wnpa-sec-2012-26.html
Vulnerability Identifier
Source
Related Link
Share with