Vulnerability in wireshark - security update
Summary
DSA-3002-1: wireshark - security update. Affects wireshark versions < 1.8.2-5wheezy11. Fixed in 1.8.2-5wheezy11. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a widely used network protocol analyzer that allows users to capture and analyze network traffic. It provides detailed information about network packets and can be used for troubleshooting, network analysis, and security auditing. The vulnerability in question affects the Catapult DCT2000, IrDA, GSM Management, and RLC ASN.1 BER dissectors in Wireshark. These dissectors are responsible for parsing and interpreting specific network protocols. The vulnerability could potentially lead to a denial of service (DoS) attack.
Vulnerability Detail
Multiple vulnerabilities have been discovered in the dissectors for Catapult DCT2000, IrDA, GSM Management, and RLC ASN.1 BER in Wireshark. These vulnerabilities could be exploited by an attacker to cause a denial of service, disrupting the normal functioning of the affected protocol dissectors. This could result in network downtime, loss of data, or other adverse effects. The specific technical details of these vulnerabilities are not provided in the given information.
How To Fix
Minimum fixed version
1.8.2-5wheezy11
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Multiple vulnerabilities have been discovered in the dissectors for Catapult DCT2000, IrDA, GSM Management, and RLC ASN.1 BER in Wireshark. These vulnerabilities could be exploited to cause a denial of service. It is recommended to upgrade the wireshark packages to the latest version to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is a network protocol analyzer used for capturing and analyzing network traffic.
The affected dissectors are Catapult DCT2000, IrDA, GSM Management, and RLC ASN.1 BER.
The vulnerabilities could result in a denial of service, causing network downtime or loss of data.
You can fix the vulnerability by upgrading the wireshark packages to version 1.8.2-5wheezy11 or later.
No specific workaround is mentioned in the provided information.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
