Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2013-3559 , CVE-2013-4083)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2012-2392 , CVE-2012-3825 , CVE-2012-4285 , CVE-2012-4288 , CVE-2012-4289 , CVE-2012-4290 , CVE-2012-4291 , CVE-2012-4292 , CVE-2012-5595 , CVE-2012-5597 , CVE-2012-5598 , CVE-2012-5599 , CVE-2012-5600 , CVE-2012-6056 , CVE-2012-6059 , CVE-2012-6060 , CVE-2012-6061 , CVE-2012-6062 , CVE-2013-3557 , CVE-2013-3561 , CVE-2013-4081 , CVE-2013-4927 , CVE-2013-4931 , CVE-2013-4932 , CVE-2013-4933 , CVE-2013-4934 , CVE-2013-4935 , CVE-2013-4936 , CVE-2013-5721)

The remote Solaris system is missing necessary patches to address security updates :

  - The P1 dissector in Wireshark 1.10.x before 1.10.1 does     not properly initialize a global variable, which allows     remote attackers to cause a denial of service     (application crash) via a crafted packet.
    (CVE-2013-4920)

  - Off-by-one error in the dissect_radiotap function in     epan/dissectors/ packet-ieee80211-radiotap.c in the     Radiotap dissector in Wireshark 1.10.x before 1.10.1     allows remote attackers to cause a denial of service     (application crash) via a crafted packet.
    (CVE-2013-4921)

  - Double free vulnerability in the     dissect_dcom_ActivationProperties function in     epan/dissectors/packet-dcom-sysact.c in the DCOM     ISystemActivator dissector in Wireshark 1.10.x before     1.10.1 allows remote attackers to cause a denial of     service (application crash) via a crafted packet.
    (CVE-2013-4922)

  - Memory leak in the dissect_dcom_ActivationProperties     function in epan/ dissectors/packet-dcom-sysact.c in the     DCOM ISystemActivator dissector in Wireshark 1.10.x     before 1.10.1 allows remote attackers to cause a denial     of service (memory consumption) via crafted packets.
    (CVE-2013-4923)

  - epan/dissectors/packet-dcom-sysact.c in the DCOM     ISystemActivator dissector in Wireshark 1.10.x before     1.10.1 does not properly validate certain index values,     which allows remote attackers to cause a denial of     service (assertion failure and application exit) via a     crafted packet. (CVE-2013-4924)

  - Integer signedness error in     epan/dissectors/packet-dcom-sysact.c in the DCOM     ISystemActivator dissector in Wireshark 1.10.x before     1.10.1 allows remote attackers to cause a denial of     service (assertion failure and daemon exit) via a     crafted packet. (CVE-2013-4925)

  - epan/dissectors/packet-dcom-sysact.c in the DCOM     ISystemActivator dissector in Wireshark 1.10.x before     1.10.1 does not properly determine whether there is     remaining packet data to process, which allows remote     attackers to cause a denial of service (application     crash) via a crafted packet. (CVE-2013-4926)

  - Integer signedness error in the get_type_length function     in epan/dissectors/ packet-btsdp.c in the Bluetooth SDP     dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x     before 1.10.1 allows remote attackers to cause a denial     of service (loop and CPU consumption) via a crafted     packet. (CVE-2013-4927)

  - Integer signedness error in the dissect_headers function     in epan/dissectors/ packet-btobex.c in the Bluetooth     OBEX dissector in Wireshark 1.10.x before 1.10.1 allows     remote attackers to cause a denial of service (infinite     loop) via a crafted packet. (CVE-2013-4928)

  - The parseFields function in     epan/dissectors/packet-dis-pdus.c in the DIS dissector     in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1     does not terminate packet-data processing after finding     zero remaining bytes, which allows remote attackers to     cause a denial of service (loop) via a crafted packet.
    (CVE-2013-4929)

  - The dissect_dvbci_tpdu_hdr function in     epan/dissectors/packet-dvbci.c in the DVB-CI dissector     in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1     does not validate a certain length value before     decrementing it, which allows remote attackers to cause     a denial of service (assertion failure and application     exit) via a crafted packet. (CVE-2013-4930)

  - epan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x     before 1.10.1 allows remote attackers to cause a denial     of service (loop) via a crafted packet that is not     properly handled by the GSM RR dissector.
    (CVE-2013-4931)

  - Multiple array index errors in     epan/dissectors/packet-gsm_a_common.c in the GSM A     Common dissector in Wireshark 1.8.x before 1.8.9 and     1.10.x before 1.10.1 allow remote attackers to cause a     denial of service (application crash) via a crafted     packet. (CVE-2013-4932)

  - The netmon_open function in wiretap/netmon.c in the     Netmon file parser in Wireshark 1.8.x before 1.8.9 and     1.10.x before 1.10.1 does not properly allocate memory,     which allows remote attackers to cause a denial of     service (application crash) via a crafted packet-trace     file. (CVE-2013-4933)

  - The netmon_open function in wiretap/netmon.c in the     Netmon file parser in Wireshark 1.8.x before 1.8.9 and     1.10.x before 1.10.1 does not initialize certain     structure members, which allows remote attackers to     cause a denial of service (application crash) via a     crafted packet-trace file. (CVE-2013-4934)

  - The dissect_per_length_determinant function in     epan/dissectors/packet-per.c in the ASN.1 PER dissector     in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1     does not initialize a length field in certain abnormal     situations, which allows remote attackers to cause a     denial of service (application crash) via a crafted     packet. (CVE-2013-4935)

  - The IsDFP_Frame function in     plugins/profinet/packet-pn-rt.c in the PROFINET     Real-Time dissector in Wireshark 1.10.x before 1.10.1     does not validate MAC addresses, which allows remote     attackers to cause a denial of service (NULL pointer     dereference and application crash) via a crafted packet.
    (CVE-2013-4936)

ID	名稱	產品	系列	已發布	已更新	嚴重性
71268	Amazon Linux AMI : wireshark (ALAS-2013-251)	Nessus	Amazon Linux Local Security Checks	2013/12/10	2019/7/10	high
80808	Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark6)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	high

偵測

搜尋 Plugin

high

high