SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   Wireshark Vendors:   Wireshark.org
Wireshark QNX6 QNET, H.225, Catapult DCT2000, UMTS FP, and IPMI Trace Dissector Bugs Lets Remote Users Cause the Target Service to Crash
SecurityTracker Alert ID:  1036760
SecurityTracker URL:  http://securitytracker.com/id/1036760
CVE Reference:   CVE-2016-7175, CVE-2016-7176, CVE-2016-7177, CVE-2016-7178, CVE-2016-7179, CVE-2016-7180   (Links to External Site)
Updated:  Sep 10 2016
Original Entry Date:  Sep 9 2016
Impact:   Denial of service via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 2.0.0 to 2.0.5
Description:   Several vulnerabilities were reported in Wireshark. A remote user can cause the target service to crash.

A remote user can send specially crafted data to cause the target dissector to crash.

The QNX6 QNET [CVE-2016-7175], H.225 [CVE-2016-7176], Catapult DCT2000 [CVE-2016-7177, CVE-2016-7179], UMTS FP [CVE-2016-7178], and IPMI Trace [CVE-2016-7180] dissectors are affected.

Impact:   A remote user can cause the target dissector to crash.
Solution:   The vendor has issued a fix (2.0.6).

The vendor advisories are available at:

https://www.wireshark.org/security/wnpa-sec-2016-50.html
https://www.wireshark.org/security/wnpa-sec-2016-51.html
https://www.wireshark.org/security/wnpa-sec-2016-52.html
https://www.wireshark.org/security/wnpa-sec-2016-53.html
https://www.wireshark.org/security/wnpa-sec-2016-54.html
https://www.wireshark.org/security/wnpa-sec-2016-55.html

Vendor URL:  www.wireshark.org/security/wnpa-sec-2016-50.html (Links to External Site)
Cause:   State error
Underlying OS:  Linux (Any), UNIX (Any), Windows (Any)

Message History:   None.


 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC