Wireshark IEEE 802.11 parser Denial of Service Vulnerability (CVE-2016-4078)

Wireshark IEEE 802.11 parser Denial of Service Vulnerability (CVE-2016-4078)
Wireshark IEEE 802.11 parser Denial of Service Vulnerability (CVE-2016-4078)

Release date:
Updated on:

Affected Systems:

Wireshark 2.0.x <2.0.3
Wireshark 1.12.x <1.12.11

Description:

CVE (CAN) ID: CVE-2016-4078

Wireshark is the most popular network protocol parser.

Wireshark 1.12.x <1.12.11, 2.0.x <2.0.3, the IEEE 802.11 parser does not properly restrict the list of elements. By constructing data packets, remote attackers can cause DoS attacks.

<* Source: Wireshark
*>

Suggestion:

Vendor patch:

Wireshark
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.wireshark.org/security/wnpa-sec-2016-21.html

Install Wireshark in Ubuntu 13.10

Simple use of Wireshark

Install Wireshark in Ubuntu 12.04

Starting Wireshark packet capture from common users in Linux

Install and run Wireshark in Linux

Wireshark details: click here
Wireshark: click here

This article permanently updates the link address: