Wireshark - SSL/TLS and DEC DNA Dissector Denial of Service
Summary
DSA-3141-1: wireshark - security update. Affects wireshark versions < 1.8.2-5wheezy14. Fixed in 1.8.2-5wheezy14. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a widely-used network protocol analyzer that allows users to capture and analyze network traffic. It provides detailed information about network packets and can be used for troubleshooting, analysis, and security auditing. The SSL/TLS and DEC DNA dissectors/parsers in Wireshark are responsible for decoding and analyzing SSL/TLS and DEC DNA network traffic. These dissectors are vulnerable to multiple issues that could lead to denial of service attacks.
Vulnerability Detail
The vulnerabilities in the SSL/TLS and DEC DNA dissectors/parsers could be exploited by an attacker to cause a denial of service. By sending specially crafted network packets, an attacker can trigger a crash or excessive resource consumption in Wireshark, resulting in the application becoming unresponsive or crashing. This could potentially disrupt network monitoring and analysis activities and impact the availability of the Wireshark application.
How To Fix
Minimum fixed version
1.8.2-5wheezy14
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for these vulnerabilities. However, users can mitigate the risk by ensuring that Wireshark is not exposed to untrusted network traffic. It is recommended to use Wireshark in controlled and secure network environments to minimize the potential impact of these vulnerabilities.
Conclusion
Multiple vulnerabilities have been discovered in the SSL/TLS and DEC DNA dissectors/parsers of Wireshark, which could result in denial of service attacks. It is recommended to upgrade to the patched versions of Wireshark to mitigate the risk. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is a network protocol analyzer used for capturing and analyzing network traffic.
SSL/TLS and DEC DNA dissectors are components in Wireshark responsible for decoding and analyzing SSL/TLS and DEC DNA network traffic.
A denial of service attack is an attempt to disrupt the availability of a network or application by overwhelming it with a large volume of malicious traffic or resource-intensive requests.
These vulnerabilities can be exploited by sending specially crafted network packets to Wireshark, triggering crashes or excessive resource consumption.
The vulnerabilities can lead to denial of service, causing Wireshark to become unresponsive or crash, potentially disrupting network monitoring and analysis activities.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
