Wireshark - Multiple Vulnerabilities in Dissectors
Summary
DLA-632-1: wireshark - security update. Affects wireshark versions < 1.12.1+g01b65bf-4+deb8u6~deb7u4. Fixed in 1.12.1+g01b65bf-4+deb8u6~deb7u4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a widely-used network protocol analyzer that allows users to capture and analyze network traffic. It provides a comprehensive set of tools for troubleshooting, analysis, and security auditing. The package is an essential tool for network administrators and security professionals.
Vulnerability Detail
Multiple vulnerabilities have been discovered in the dissectors for H.225, Catapult DCT2000, UMTS FP, and IPMI in Wireshark. These vulnerabilities could potentially lead to denial of service or the execution of arbitrary code. Attackers could exploit these vulnerabilities by sending specially crafted network packets, causing the application to crash or allowing them to execute arbitrary code on the target system. The impact of these vulnerabilities can range from disruption of network monitoring and analysis to potential compromise of the underlying system.
How To Fix
Minimum fixed version
1.12.1+g01b65bf-4+deb8u6~deb7u4
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities. It is essential to apply the recommended fix by upgrading to the latest version of Wireshark.
Conclusion
Multiple vulnerabilities have been discovered in the dissectors for H.225, Catapult DCT2000, UMTS FP, and IPMI in Wireshark. It is crucial to upgrade to the latest version of Wireshark to mitigate the risks associated with these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is a network protocol analyzer used for capturing and analyzing network traffic.
These vulnerabilities could result in denial of service or the execution of arbitrary code, potentially leading to disruption of network monitoring and analysis or compromise of the underlying system.
To fix these vulnerabilities, it is recommended to upgrade your Wireshark packages to the latest version.
There are no known workarounds for these vulnerabilities. It is crucial to apply the recommended fix by upgrading to the latest version of Wireshark.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, on the Debian LTS wiki.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
