Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of Wireshark.

Impacted products: Debian, MBS, openSUSE, Wireshark

Severity: 2/4

Creation date: 13/11/2014

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in Wireshark.

An attacker can generate a buffer overflow in SigComp UDVM, in
order to trigger a denial of service, and possibly to execute
code. [severity:2/4; CVE-2014-8710, wnpa-sec-2014-20]

An attacker can send a malicious AMQP packet, in order to trigger
a denial of service. [severity:1/4; CVE-2014-8711,
wnpa-sec-2014-21]

An attacker can send a malicious NCP packet, in order to trigger a
denial of service. [severity:1/4; CVE-2014-8712, wnpa-sec-2014-22]

An attacker can send a malicious NCP packet, in order to trigger a
denial of service. [severity:1/4; CVE-2014-8713, wnpa-sec-2014-22]

An attacker can generate an infinite loop in TN5250, in order to
trigger a denial of service. [severity:1/4; CVE-2014-8714,
wnpa-sec-2014-23]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Wireshark-multiple-vulnerabilities-15635