KLA61755 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in LISP dissector can be exploited to cause denial of service.
2. Denial of service vulnerability in RPC over RDMA dissector can be exploited to cause denial of service.
3. Denial of service vulnerability in GQUIC dissector can be exploited to cause denial of service.

Original advisories

Wireshark • wnpa-sec-2023-11 GQUIC dissector crash

Wireshark • wnpa-sec-2023-10 LISP dissector large loop

Wireshark • wnpa-sec-2023-09 RPCoRDMA dissector crash

Related products

Wireshark

CVE list

CVE-2023-1993 high

CVE-2023-1994 high

CVE-2023-1992 critical

Solution

Update to the latest version

Download Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 3.6.x earlier than 3.6.13Wireshark 4.0.x earlier than 4.0.5