Multiple Vulnerabilities in Wireshark
Summary
DSA-2709-1: wireshark - several. Affects wireshark versions < 1.8.2-5wheezy4. Fixed in 1.8.2-5wheezy4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a widely-used network protocol analyzer that allows users to capture and analyze network traffic. It provides detailed information about network packets and can be used for troubleshooting, network analysis, and security auditing. However, several vulnerabilities have been discovered in Wireshark that could potentially lead to denial of service or the execution of arbitrary code.
Vulnerability Detail
The vulnerabilities affect various dissectors in Wireshark, including CAPWAP, GMR-1 BCCH, PPP, NBAP, RDP, HTTP, DCP ETSI, and the Ixia IxVeriWave file parser. These vulnerabilities could be exploited by an attacker to cause a denial of service or execute arbitrary code on a vulnerable system. The specific details of each vulnerability are as follows:
- CVE-2013-4074: [Description of vulnerability 1]
- CVE-2013-4075: [Description of vulnerability 2]
- CVE-2013-4076: [Description of vulnerability 3]
- CVE-2013-4077: [Description of vulnerability 4]
- CVE-2013-4078: [Description of vulnerability 5]
- CVE-2013-4081: [Description of vulnerability 6]
- CVE-2013-4082: [Description of vulnerability 7]
- CVE-2013-4083: [Description of vulnerability 8]
How To Fix
Minimum fixed version
1.8.2-5wheezy4
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities.
Conclusion
Multiple vulnerabilities have been discovered in Wireshark that could potentially lead to denial of service or the execution of arbitrary code. It is recommended to upgrade your Wireshark packages to the fixed version to mitigate these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is a network protocol analyzer used for capturing and analyzing network traffic.
These vulnerabilities could allow an attacker to cause a denial of service or execute arbitrary code on a vulnerable system.
To fix these vulnerabilities, you should upgrade your Wireshark packages to the fixed version mentioned in the advisory.
No, there are no known workarounds for these vulnerabilities.
You can find more information about these vulnerabilities in the Debian Security Advisory DSA-2709-1.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
