Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can generate a memory corruption in Wireshark, in
order to trigger a denial of service, and possibly to run code.

Impacted products: openSUSE, Wireshark.

Severity: 2/4.

Creation date: 15/10/2015.

DESCRIPTION OF THE VULNERABILITY

The Wireshark product uses the pcapng_read_if_descr_block()
function to copy the description of a capture.

However, the BPF filter is copied at an invalid address.

An attacker can therefore generate a memory corruption in
Wireshark, in order to trigger a denial of service, and possibly
to run code.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Wireshark-memory-corruption-via-Interface-Filter-18112