Wireshark Security Update - Denial of Service Vulnerability
Summary
DLA-1258-1: wireshark - security update. Affects wireshark versions < 1.12.1+g01b65bf-4+deb8u6~deb7u9. Fixed in 1.12.1+g01b65bf-4+deb8u6~deb7u9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Wireshark is a widely-used network protocol analyzer that allows users to capture and analyze network traffic. It provides detailed information about network packets and can be used for troubleshooting, analysis, and security auditing. Wireshark is an open-source project and is available for various operating systems.
Wireshark is vulnerable to a Denial of Service (DoS) attack caused by malformed packets. This vulnerability can be exploited by an attacker to crash the parsers of Wireshark, leading to a denial of service condition.
Vulnerability Detail
The vulnerability in Wireshark arises from a lack of proper input validation in several parsers. When Wireshark processes a malformed packet, it can trigger a crash in the affected parsers. This vulnerability can be exploited remotely by an attacker who can send specially crafted packets to a target Wireshark installation.
The impact of this vulnerability is a denial of service condition, where Wireshark becomes unresponsive or crashes, potentially disrupting network monitoring and analysis activities. It is important to note that this vulnerability does not allow arbitrary code execution or unauthorized access to the system.
How To Fix
Minimum fixed version
1.12.1+g01b65bf-4+deb8u6~deb7u9
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update as soon as possible to mitigate the risk of a denial of service attack.
Conclusion
Wireshark is vulnerable to a Denial of Service (DoS) attack caused by malformed packets. This vulnerability can be mitigated by upgrading to the latest version of the Wireshark package. It is crucial to apply the security update promptly to prevent potential disruptions in network monitoring and analysis activities. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is a network protocol analyzer that allows users to capture and analyze network traffic. It is commonly used for troubleshooting, analysis, and security auditing.
A Denial of Service (DoS) attack is an attempt to make a computer or network resource unavailable to its intended users. In the case of this vulnerability, it can be triggered by sending specially crafted packets to a Wireshark installation, causing it to crash or become unresponsive.
Yes, this vulnerability can be exploited remotely by an attacker who can send malicious packets to a target Wireshark installation over the network.
The impact of this vulnerability is a denial of service condition, where Wireshark becomes unresponsive or crashes. This can disrupt network monitoring and analysis activities but does not allow arbitrary code execution or unauthorized access to the system.
To fix this vulnerability, it is recommended to upgrade the Wireshark package to version 1.12.1+g01b65bf-4+deb8u6~deb7u9 or later. Follow the instructions provided by the Debian LTS security advisories to update the package.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
