KLA61756 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in NetScaler file parser can be exploited to cause denial of service.
2. Denial of service vulnerability in XRA dissector can be exploited to cause denial of service.
3. Denial of service vulnerability in VMS TCPIPtrace file parser can be exploited to cause denial of service.
4. Denial of service vulnerability in Candump log file parser can be exploited to cause denial of service.
5. Denial of service vulnerability in RTPS dissector can be exploited to cause denial of service.
6. Denial of service vulnerability in BLF file parser can be exploited to cause denial of service.
7. Denial of service vulnerability in GDSDB dissector can be exploited to cause denial of service.
8. Denial of service vulnerability in IEEE C37.118 Synchrophasor dissector can be exploited to cause denial of service.

Original advisories

Wireshark • wnpa-sec-2023-15 NetScaler file parser crash

Wireshark • wnpa-sec-2023-12 Candump log file parser crash

Wireshark • wnpa-sec-2023-19 IEEE C37.118 Synchrophasor dissector crash

Wireshark • wnpa-sec-2023-20 XRA dissector infinite loop

Wireshark • wnpa-sec-2023-13 BLF file parser crash

Wireshark • wnpa-sec-2023-18 RTPS dissector crash

Wireshark • wnpa-sec-2023-16 VMS TCPIPtrace file parser crash

Wireshark • wnpa-sec-2023-17 BLF file parser crash

Wireshark • wnpa-sec-2023-14 GDSDB dissector infinite loop

Related products

Wireshark

CVE list

CVE-2023-0666 high

CVE-2023-2857 high

CVE-2023-2855 high

CVE-2023-2879 critical

CVE-2023-2952 high

CVE-2023-0668 high

CVE-2023-2854 high

CVE-2023-2856 high

CVE-2023-2858 high

Solution

Update to the latest version

Download Wireshark

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 3.6.x earlier than 3.6.14Wireshark 4.0.x earlier than 4.0.6