KLA11463 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. Infinite loop vulnerability in GSUP dissector can be exploited remotely via specially designed packet to cause denial of service.
2. Infinite loop vulnerability in IEEE 802.11 dissector can be exploited remotely via specially designed packet to cause denial of service.
3. Denial of service vulnerability related to TSDNS dissector can be exploited remotely via specially designed packet.
4. Infinite loop vulnerability in Rbm dissector can be exploited remotely via specially designed packet to cause denial of service.

Original advisories

wnpa-sec-2019-12

wnpa-sec-2019-11

wnpa-sec-2019-16

wnpa-sec-2019-13

Related products

Wireshark

CVE list

CVE-2019-10898 warning

CVE-2019-10897 warning

CVE-2019-10902 warning

CVE-2019-10900 warning

Solution

Update to the latest version

Get Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 3.0.x earlier than 3.0.1