Wireshark Multiple Denial of Service Vulnerabilities - Advisories - Secunia

WireSharkに複数のDoSを受ける脆弱性が存在するそうです。

細工されたパケットを受信したときとか、キャプチャファイルを読み込んだときにループするそうです。

Some vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerabilities are caused due to various errors (e.g. large loops with extreme memory consumption, endless loops, crashes, and buffer overflows) within the following:
* SSL, ANSI MAP, Firebird/Interbase, NCP, HTTP, MEGACO, DCP ETSI, PPP, and Bluetooth SDP dissectors
* when processing a malformed MP3 or iSeries (OS/400) Communication trace file
* when processing a malformed DNP or RPC Portmap packet

These can be exploited to crash Wireshark or consume large amounts of system resources by e.g. parsing a specially crafted packet that is either captured off the wire or loaded via a capture file.

The vulnerabilities are reported in various versions from 0.8.16 through 0.99.6. Other versions may also be affected.

---