Lucene search

K
kasperskyKaspersky LabKLA11337
HistoryOct 10, 2018 - 12:00 a.m.

KLA11337 Multiple DoS vulnerabilities in Wireshark

2018-10-1000:00:00
Kaspersky Lab
threats.kaspersky.com
487

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.013 Low

EPSS

Percentile

85.9%

Detect date:

10/10/2018

Severity:

High

Description:

Multiple serious vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities:

Affected products:

Wireshark 2.6.x earlier than 2.6.4
Wireshark 2.4.x earlier than 2.4.10

Solution:

Update to the latest version
Get Wireshark

Original advisories:

wnpa-sec-2018-47
wnpa-sec-2018-48
wnpa-sec-2018-49
wnpa-sec-2018-50

Impacts:

DoS

Related products:

Wireshark

CVE-IDS:

CVE-2018-182275.0Warning
CVE-2018-182267.8Critical
CVE-2018-182255.0Warning
CVE-2018-120865.0Warning

Exploitation:

Public exploits exist for this vulnerability.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.013 Low

EPSS

Percentile

85.9%