Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.814134
Category:Denial of Service
Title:Wireshark Steam IHS Discovery/CoAP Dissector DoS Vulnerabilities - Mac OS X
Summary:Wireshark is prone to multiple denial of service vulnerabilities.
Description:Summary:
Wireshark is prone to multiple denial of service vulnerabilities.

Vulnerability Insight:
The flaws are due to insufficient validation
of user-supplied input processed by Steam In-Home Streaming (IHS) Discovery
and Constrained Application Protocol (CoAP) dissector components.

Vulnerability Impact:
Successful exploitation will allow attackers
to cause a denial of service (DoS) condition on a targeted system.

Affected Software/OS:
Wireshark version 2.6.0 to 2.6.3 on Mac OS X.

Solution:
Upgrade to Wireshark 2.6.4 or later. Please see the references for more information.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2018-18225
BugTraq ID: 105583
http://www.securityfocus.com/bid/105583
Debian Security Information: DSA-4359 (Google Search)
https://www.debian.org/security/2018/dsa-4359
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a
https://www.wireshark.org/security/wnpa-sec-2018-49.html
http://www.securitytracker.com/id/1041909
SuSE Security Announcement: openSUSE-SU-2020:0362 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
Common Vulnerability Exposure (CVE) ID: CVE-2018-18226
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7
https://www.wireshark.org/security/wnpa-sec-2018-48.html
CopyrightCopyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.