Multiple vulnerabilities has been found and corrected in wireshark :

Infinite and large loops in ANSI MAP, BACapp, Bluetooth HCI, IEEE 802.3, LTP, and R3 dissectors have been fixed. Discovered by Laurent Butti (http://www.wireshark.org/security/wnpa-sec-2012-08.html [CVE-2012-2392])

The DIAMETER dissector could try to allocate memory improperly and crash (http://www.wireshark.org/security/wnpa-sec-2012-09.html [CVE-2012-2393])

Wireshark could crash on SPARC processors due to misaligned memory.
Discovered by Klaus Heckelmann (http://www.wireshark.org/security/wnpa-sec-2012-10.html [CVE-2012-2394])

The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon dump (CVE-2012-4048).

epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet (CVE-2012-4049).

The DCP ETSI dissector could trigger a zero division (CVE-2012-4285).

The XTP dissector could go into an infinite loop (CVE-2012-4288).

The AFP dissector could go into a large loop (CVE-2012-4289).

The RTPS2 dissector could overflow a buffer (CVE-2012-4296).

The GSM RLC MAC dissector could overflow a buffer (CVE-2012-4297).

The CIP dissector could exhaust system memory (CVE-2012-4291).

The STUN dissector could crash (CVE-2012-4292).

The EtherCAT Mailbox dissector could abort (CVE-2012-4293).

The CTDB dissector could go into a large loop (CVE-2012-4290).

Martin Wilck discovered an infinite loop in the DRDA dissector (CVE-2012-5239).

The USB dissector could go into an infinite loop. (wnpa-sec-2012-31)

The ISAKMP dissector could crash. (wnpa-sec-2012-35)

The iSCSI dissector could go into an infinite loop. (wnpa-sec-2012-36)

The WTP dissector could go into an infinite loop. (wnpa-sec-2012-37)

The RTCP dissector could go into an infinite loop. (wnpa-sec-2012-38)

The ICMPv6 dissector could go into an infinite loop.
(wnpa-sec-2012-40)

Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors (wnpa-sec-2013-01).

The CLNP dissector could crash (wnpa-sec-2013-02).

The DTN dissector could crash (wnpa-sec-2013-03).

The MS-MMC dissector (and possibly others) could crash (wnpa-sec-2013-04).

The DTLS dissector could crash (wnpa-sec-2013-05).

The DCP-ETSI dissector could corrupt memory (wnpa-sec-2013-07).

The Wireshark dissection engine could crash (wnpa-sec-2013-08).

The NTLMSSP dissector could overflow a buffer (wnpa-sec-2013-09).

The sFlow dissector could go into an infinite loop (CVE-2012-6054).

The SCTP dissector could go into an infinite loop (CVE-2012-6056).

The MS-MMS dissector could crash (CVE-2013-2478).

The RTPS and RTPS2 dissectors could crash (CVE-2013-2480).

The Mount dissector could crash (CVE-2013-2481).

The AMPQ dissector could go into an infinite loop (CVE-2013-2482).

The ACN dissector could attempt to divide by zero (CVE-2013-2483).

The CIMD dissector could crash (CVE-2013-2484).

The FCSP dissector could go into an infinite loop (CVE-2013-2485).

The DTLS dissector could crash (CVE-2013-2488).

This advisory provides the latest version of Wireshark (1.6.14) which is not vulnerable to these issues.

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2013-3559 , CVE-2013-4083)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2012-2392 , CVE-2012-3825 , CVE-2012-4285 , CVE-2012-4288 , CVE-2012-4289 , CVE-2012-4290 , CVE-2012-4291 , CVE-2012-4292 , CVE-2012-5595 , CVE-2012-5597 , CVE-2012-5598 , CVE-2012-5599 , CVE-2012-5600 , CVE-2012-6056 , CVE-2012-6059 , CVE-2012-6060 , CVE-2012-6061 , CVE-2012-6062 , CVE-2013-3557 , CVE-2013-3561 , CVE-2013-4081 , CVE-2013-4927 , CVE-2013-4931 , CVE-2013-4932 , CVE-2013-4933 , CVE-2013-4934 , CVE-2013-4935 , CVE-2013-4936 , CVE-2013-5721)

The remote Solaris system is missing necessary patches to address security updates :

  - The dissect_pft function in     epan/dissectors/packet-dcp-etsi.c in the DCP ETSI     dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before     1.6.10, and 1.8.x before 1.8.2 allows remote attackers     to cause a denial of service (divide-by-zero error and     application crash) via a zero-length message.
    (CVE-2012-4285)

  - The pcapng_read_packet_block function in     wiretap/pcapng.c in the pcap-ng file parser in Wireshark     1.8.x before 1.8.2 allows user-assisted remote attackers     to cause a denial of service (divide-by-zero error and     application crash) via a crafted pcap-ng file.
    (CVE-2012-4286)

  - epan/dissectors/packet-mongo.c in the MongoDB dissector     in Wireshark 1.8.x before 1.8.2 allows remote attackers     to cause a denial of service (loop and CPU consumption)     via a small value for a BSON document length.
    (CVE-2012-4287)

  - Integer overflow in the dissect_xtp_ecntl function in     epan/dissectors/ packet-xtp.c in the XTP dissector in     Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and     1.8.x before 1.8.2 allows remote attackers to cause a     denial of service (loop or application crash) via a     large value for a span length. (CVE-2012-4288)

  - epan/dissectors/packet-afp.c in the AFP dissector in     Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and     1.8.x before 1.8.2 allows remote attackers to cause a     denial of service (loop and CPU consumption) via a large     number of ACL entries. (CVE-2012-4289)

  - The CTDB dissector in Wireshark 1.4.x before 1.4.15,     1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows     remote attackers to cause a denial of service (loop and     CPU consumption) via a malformed packet. (CVE-2012-4290)

  - The CIP dissector in Wireshark 1.4.x before 1.4.15,     1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows     remote attackers to cause a denial of service (memory     consumption) via a malformed packet. (CVE-2012-4291)

  - The dissect_stun_message function in     epan/dissectors/packet-stun.c in the STUN dissector in     Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and     1.8.x before 1.8.2 does not properly interact with     key-destruction behavior in a certain tree library,     which allows remote attackers to cause a denial of     service (application crash) via a malformed packet.
    (CVE-2012-4292)

  - plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox     dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before     1.6.10, and 1.8.x before 1.8.2 does not properly handle     certain integer fields, which allows remote attackers to     cause a denial of service (application exit) via a     malformed packet. (CVE-2012-4293)

  - Buffer overflow in the channelised_fill_sdh_g707_format     function in epan/ dissectors/packet-erf.c in the ERF     dissector in Wireshark 1.8.x before 1.8.2 allows remote     attackers to execute arbitrary code via a large speed     (aka rate) value. (CVE-2012-4294)

  - Array index error in the     channelised_fill_sdh_g707_format function in epan/     dissectors/packet-erf.c in the ERF dissector in     Wireshark 1.8.x before 1.8.2 might allow remote     attackers to cause a denial of service (application     crash) via a crafted speed (aka rate) value.
    (CVE-2012-4295)

  - Buffer overflow in epan/dissectors/packet-rtps2.c in the     RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x     before 1.6.10, and 1.8.x before 1.8.2 allows remote     attackers to cause a denial of service (CPU consumption)     via a malformed packet. (CVE-2012-4296)

  - Buffer overflow in the dissect_gsm_rlcmac_downlink     function in epan/dissectors/ packet-gsm_rlcmac.c in the     GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10     and 1.8.x before 1.8.2 allows remote attackers to     execute arbitrary code via a malformed packet.
    (CVE-2012-4297)

  - Integer signedness error in the     vwr_read_rec_data_ethernet function in wiretap/ vwr.c in     the Ixia IxVeriWave file parser in Wireshark 1.8.x     before 1.8.2 allows user-assisted remote attackers to     execute arbitrary code via a crafted packet-trace file     that triggers a buffer overflow. (CVE-2012-4298)

The installed version of Wireshark is 1.8.x before 1.8.2.  This version is affected by the following vulnerabilities :

  - The 'DCP ETSI' dissector and 'pcap-ng' parser can     attempt a divide by zero operation leading to an     application crash. (CVE-2012-4285, CVE-2012-4286)

  - The 'MongoDB', 'XTP', 'AFP', and 'CTDB' dissectors can     be caused to large or infinite loops. (CVE-2012-4287,     CVE-2012-4288, CVE-2012-4289, CVE-2012-4290)

  - The 'CIP' dissector can be caused to exhaust system     memory. (CVE-2012-4291)

  - The 'STUN' dissector can be caused to crash.
    (CVE-2012-4292)

  - The 'EtherCAT Mailbox' dissector can be caused to     abort. (CVE-2012-4293)

  - A buffer overflow exists related to the 'ERF', 'RTPS2'     and 'GSM RLC MAC' dissectors. (CVE-2012-4294,     CVE-2012-4295, CVE-2012-4296, CVE-2012-4297)

  - A file parsing error related to 'Ixia IxVeriWave'     processing can allow a buffer overflow. (CVE-2012-4298)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
66069	Mandriva Linux Security Advisory : wireshark (MDVSA-2013:055)	Nessus	Mandriva Local Security Checks	2013/4/20	2021/1/6	high
71268	Amazon Linux AMI : wireshark (ALAS-2013-251)	Nessus	Amazon Linux Local Security Checks	2013/12/10	2019/7/10	high
80804	Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark3)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	high
61573	Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities	Nessus	Windows	2012/8/17	2026/3/30	high

检测

插件搜索

high

high

high

high