ID de Prueba:	1.3.6.1.4.1.25623.1.0.808287
Categoría:	Denial of Service
Título:	Wireshark Multiple Denial of Service Vulnerabilities-02 (Aug 2016) - Windows
Resumen:	Wireshark is prone to multiple denial of service vulnerabilities.
Descripción:	Summary: Wireshark is prone to multiple denial of service vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An error in 'epan/proto.c' script cause OpenFlow dissector (and possibly others) to go into a long loop. - The 'epan/dissectors/packet-ldss.c' script in the LDSS dissector mishandles conversations. - An Off-by-one error in 'epan/dissectors/packet-rlc.c' script in the RLC dissector. - The 'epan/dissectors/packet-rlc.c' in the RLC dissector uses an incorrect integer data type. - An error in 'epan/dissectors/packet-wsp.c' script cause WSP dissector to go into a long loop. - An error in 'epan/dissectors/packet-packetbb.c' script could cause a divide-by-zero error in PacketBB dissector. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct denial of service attack. Affected Software/OS: Wireshark version 1.12.x before 1.12.13 and 2.0.x before 2.0.5 on Windows. Solution: Upgrade to Wireshark version 1.12.13 or 2.0.5 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6511 Debian Security Information: DSA-3648 (Google Search) http://www.debian.org/security/2016/dsa-3648 http://openwall.com/lists/oss-security/2016/07/28/3 http://www.securitytracker.com/id/1036480 Common Vulnerability Exposure (CVE) ID: CVE-2016-6509 Common Vulnerability Exposure (CVE) ID: CVE-2016-6510 Common Vulnerability Exposure (CVE) ID: CVE-2016-6508 Common Vulnerability Exposure (CVE) ID: CVE-2016-6506 Common Vulnerability Exposure (CVE) ID: CVE-2016-6505 BugTraq ID: 92163 http://www.securityfocus.com/bid/92163 https://www.exploit-db.com/exploits/40197/
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.