Wireshark DCP ETSI Dissector DoS Vulnerability - June 13 (Windows)

  1. Network Vulnerabilities
  2. Denial of Service
  3. Wireshark DCP ETSI Dissector DoS Vulnerability - June 13 (Windows)
Summary
This host is installed with Wireshark and is prone to denial of service vulnerability.
Impact
Successful exploitation will allow remote attackers to cause denial of service by injecting a malformed packet. Impact Level: Application
Solution
Upgrade to the Wireshark version 1.6.16 or 1.8.8 or 1.10.1 or later, For updates refer to http://www.wireshark.org/download
Insight
- 'dissect_pft function' function in epan/dissectors/packet-dcp-etsi.c does not validate fragment length value.
Affected
Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8 and 1.10.0 on Windows
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities