Denial of Service Vulnerability in wireshark
Summary
DLA-826-1: wireshark - security update. Affects wireshark versions < 1.12.1+g01b65bf-4+deb8u6~deb7u6. Fixed in 1.12.1+g01b65bf-4+deb8u6~deb7u6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a network traffic analyzer that allows users to capture and analyze network packets. It is widely used for troubleshooting network issues, analyzing network protocols, and conducting network security audits. The vulnerability in question affects Wireshark version 1.12.1+g01b65bf-4+deb8u6~deb7u6 on Debian 7 Wheezy.
Vulnerability Detail
The vulnerability is a denial of service (DoS) issue that arises from a memory exhaustion or infinite loop when processing a malformed NATO Ground Moving Target Indicator Format ("STANAG 4607") capture file. An attacker can exploit this vulnerability by providing a specially crafted file, causing Wireshark to consume excessive memory or enter an infinite loop, resulting in a DoS condition. This vulnerability can potentially disrupt network monitoring and analysis activities.
How To Fix
Minimum fixed version
1.12.1+g01b65bf-4+deb8u6~deb7u6
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The vulnerability in Wireshark can lead to a denial of service condition when processing a specially crafted capture file. To mitigate this vulnerability, it is crucial to upgrade to the fixed version of Wireshark. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is a network traffic analyzer that allows users to capture and analyze network packets. It is commonly used for network troubleshooting, protocol analysis, and network security audits.
This vulnerability can lead to a denial of service (DoS) condition, potentially disrupting network monitoring and analysis activities.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your version of Wireshark is affected by this vulnerability. Simply upload your package manifest file (e.g., package-lock.json) and Vulert will provide real-time alerts for open-source vulnerabilities.
No specific workaround has been provided for this vulnerability. It is recommended to upgrade to the fixed version of Wireshark.
For more information about this vulnerability, you can refer to the Debian Security Advisory DLA-826-1 (https://storage.googleapis.com/debian-osv/dla-osv/DLA-826-1.json) or contact the Wireshark support team.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
