Wireshark - Multiple Vulnerabilities in WCP, pcapng, and TNEF Dissectors
Summary
DSA-3210-1: wireshark - security update. Affects wireshark versions < 1.8.2-5wheezy15. Fixed in 1.8.2-5wheezy15. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is an open-source network protocol analyzer used for troubleshooting, analysis, and development of communication protocols. It allows users to capture and interactively browse network traffic. Wireshark supports a wide range of protocols and provides detailed information about each packet in the captured data. However, multiple vulnerabilities have been discovered in the dissectors/parsers for WCP, pcapng, and TNEF.
Vulnerability Detail
The vulnerabilities in the WCP, pcapng, and TNEF dissectors/parsers could lead to denial of service attacks. These vulnerabilities can be exploited by an attacker to crash the Wireshark application or cause it to consume excessive resources, resulting in a denial of service condition. The specific technical details of these vulnerabilities are not provided in the vulnerability report.
How To Fix
Minimum fixed version
1.8.2-5wheezy15
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workarounds are mentioned in the vulnerability report. It is advised to apply the recommended fix by upgrading to the patched versions of Wireshark.
Conclusion
Multiple vulnerabilities have been discovered in the WCP, pcapng, and TNEF dissectors/parsers of Wireshark. These vulnerabilities could lead to denial of service attacks. It is recommended to upgrade your Wireshark packages to the patched versions mentioned in the vulnerability report. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is an open-source network protocol analyzer used for troubleshooting, analysis, and development of communication protocols. It allows users to capture and interactively browse network traffic.
The vulnerability affects Wireshark version 1.8.2-5wheezy15 in the stable distribution (wheezy), and version 1.12.1+g01b65bf-4 in the upcoming stable distribution (jessie) and the unstable distribution (sid).
These vulnerabilities could result in denial of service attacks, causing the Wireshark application to crash or consume excessive resources.
To fix these vulnerabilities, upgrade your Wireshark packages to the patched versions mentioned in the vulnerability report.
You can obtain the updated packages from the official Wireshark website or through your package manager.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
