wnpa-sec-2014-19 · Sniffer file parser crash
Summary
Name: Sniffer file parser crash
Docid: wnpa-sec-2014-19
Date: September 16, 2014
Affected versions: 1.12.0, 1.10.0 to 1.10.9
Fixed versions: 1.12.1, 1.10.10
References:
Wireshark bug 10461
CVE-2014-6429
CVE-2014-6430
CVE-2014-6431
CVE-2014-6432
Details
Description
The DOS Sniffer file parser could crash. Discovered by Chaoqiang Zhang (Oregon State University) and Lewis Burns (HP Fortify).
Impact
It may be possible to make Wireshark crash by convincing someone to read a malformed packet trace file.
Resolution
Upgrade to Wireshark 1.12.1, 1.10.10 or later.
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
- • Fully integrated with Wireshark and AirPcap™
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ NetShark appliance
- • Troubleshoot problems faster
- • Quickly identify the applications running on your network
- • Monitor your virtual machine traffic
I need to capture wireless traffic...
ANSWER: AirPcap™ 802.11 Packet Capture
- • WLAN packet capture and transmission
- • Full 802.11 a/b/g/n support
- • View management, control and data frames
- • Multi-channel aggregation (with multiple adapters)