ID de Prueba:	1.3.6.1.4.1.25623.1.0.809048
Categoría:	Denial of Service
Título:	Wireshark Multiple Denial of Service Vulnerabilities (Sep 2016) - Windows
Resumen:	Wireshark is prone to multiple denial of service vulnerabilities.
Descripción:	Summary: Wireshark is prone to multiple denial of service vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - The 'epan/dissectors/packet-ipmi-trace.c' script in the IPMI trace dissector mishandles string. - A stack-based buffer overflow error in 'epan/dissectors/packet-catapult-dct2000.c' script in the Catapult DCT2000 dissector. - The 'epan/dissectors/packet-umts_fp.c' script in the UMTS FP dissector does not ensure that memory is allocated for certain data structures. - The 'epan/dissectors/packet-catapult-dct2000.c' script in the Catapult DCT2000 dissector does not restrict the number of channels. - The 'epan/dissectors/packet-h225.c' in the H.225 dissector calls snprintf with one of its input buffers as the output buffer. - The 'epan/dissectors/packet-qnet6.c' in the QNX6 QNET dissector mishandles MAC address data. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct denial of service attack. Affected Software/OS: Wireshark version 2.0.x before 2.0.6 on Windows. Solution: Upgrade to Wireshark version 2.0.6 or or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7175 http://www.securitytracker.com/id/1036760 Common Vulnerability Exposure (CVE) ID: CVE-2016-7176 Debian Security Information: DSA-3671 (Google Search) http://www.debian.org/security/2016/dsa-3671 Common Vulnerability Exposure (CVE) ID: CVE-2016-7177 Common Vulnerability Exposure (CVE) ID: CVE-2016-7178 Common Vulnerability Exposure (CVE) ID: CVE-2016-7179 Common Vulnerability Exposure (CVE) ID: CVE-2016-7180
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.