Wireshark - Multiple Vulnerabilities in Dissectors/Parsers
Summary
DSA-3049-1: wireshark - security update. Affects wireshark versions < 1.8.2-5wheezy12. Fixed in 1.8.2-5wheezy12. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is an open-source network protocol analyzer used for troubleshooting, analysis, and development of communication protocols. It allows users to capture and examine network traffic in real-time. The Wireshark package in Debian 7 (wheezy) is vulnerable to multiple security issues in its dissectors/parsers for RTP, MEGACO, Netflow, RTSP, SES, and Sniffer.
Vulnerability Detail
The vulnerabilities discovered in the dissectors/parsers could lead to denial of service attacks. Attackers could exploit these vulnerabilities to crash the Wireshark application or cause it to consume excessive resources, resulting in a denial of service condition. The specific technical details of each vulnerability can be found in the related CVEs: CVE-2014-6422, CVE-2014-6423, CVE-2014-6424, CVE-2014-6427, CVE-2014-6428, CVE-2014-6429, CVE-2014-6430, CVE-2014-6431, CVE-2014-6432.
How To Fix
Minimum fixed version
1.8.2-5wheezy12
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Multiple vulnerabilities have been discovered in the dissectors/parsers of Wireshark, which could result in denial of service attacks. It is recommended to upgrade the wireshark packages to the fixed versions to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is an open-source network protocol analyzer used for troubleshooting, analysis, and development of communication protocols.
The vulnerabilities are related to the dissectors/parsers for RTP, MEGACO, Netflow, RTSP, SES, and Sniffer, which could result in denial of service attacks.
The vulnerabilities could allow attackers to crash the Wireshark application or cause it to consume excessive resources, leading to a denial of service condition.
To fix these vulnerabilities, you should upgrade your wireshark packages to the recommended versions for your distribution.
You can find more information about the vulnerabilities in the related CVEs: CVE-2014-6422, CVE-2014-6423, CVE-2014-6424, CVE-2014-6427, CVE-2014-6428, CVE-2014-6429, CVE-2014-6430, CVE-2014-6431, CVE-2014-6432.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
