Wireshark ZigBee parser DoS Vulnerability (CVE-2015-6244)

Wireshark ZigBee parser DoS Vulnerability (CVE-2015-6244)
Wireshark ZigBee parser DoS Vulnerability (CVE-2015-6244)

Release date:
Updated on:

Affected Systems:

Wireshark Wireshark 1.12.x

Description:

Bugtraq id: 76383
CVE (CAN) ID: CVE-2015-6244

Wireshark is the most popular network protocol parser.

Wireshark versions earlier than 1.12.7, The ZigBee parser epan/dissectors/packet-zbee-security.c function dissect_zbee_secure, mistakenly trusting the packet length field, which allows remote attackers to construct packets, this vulnerability causes DoS (application crash ).

<* Source: Magnus Stubman
*>

Suggestion:

Vendor patch:

Wireshark
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://bugs.wireshark.org/bugzilla/show_bug.cgi? Id = 11389
Http://www.wireshark.org/security/wnpa-sec-2015-24.html
Https://code.wireshark.org/review/gitweb? P = wireshark. git; a = commit; h = 43c2e5769a17f0945fdcdabe35204a13ca9bbc85
Https://code.wireshark.org/review/gitweb? P = wireshark. git; a = commit; h = 31571144be5f03f054a9c7e195b38c2f5792fe54
Https://code.wireshark.org/review/gitweb? P = wireshark. git; a = commit; h = 655b0dc623e29da212be3e205314624fe3182562

Install Wireshark in Ubuntu 13.10

Simple use of Wireshark

Install Wireshark in Ubuntu 12.04

Starting Wireshark packet capture from common users in Linux

Install and run Wireshark in Linux

Wireshark details: click here
Wireshark: click here

This article permanently updates the link address: