Wireshark SigComp parser Remote Denial of Service Vulnerability (CVE-2014-8710)

Wireshark SigComp parser Remote Denial of Service Vulnerability (CVE-2014-8710)

Release date:
Updated on:

Affected Systems:
Wireshark 1.10.0-1.10.10
Description:
Bugtraq id: 71069
CVE (CAN) ID: CVE-2014-8710

Wireshark is the most popular network protocol parser.

Wireshark 1.10.0-1.10.10 has a security vulnerability in the SigComp parser when processing malformed packet tracing files. Attackers can exploit this vulnerability to crash affected applications.

<* Source: vendor

Link: https://bugzilla.redhat.com/show_bug.cgi? Id = 1163584
*>

Suggestion:
Vendor patch:

Wireshark
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.wireshark.org
Https://www.wireshark.org/security/wnpa-sec-2014-20.html

Simple use of Wireshark

Install Wireshark in Ubuntu 12.04

Starting Wireshark packet capture from common users in Linux

Install and run Wireshark in Linux

Wireshark details: click here
Wireshark: click here

This article permanently updates the link address: