The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Aug 30, 2017 | Mar 7, 2013 |
| Debian | — | Upgrade wireshark | Jul 30, 2024 | Mar 7, 2013 |
| Suse | — | Upgrade wireshark-debuginfoUpgrade wiresharkUpgrade wireshark-develUpgrade sle-sdk-releaseUpgrade wireshark-debugsource | Dec 12, 2013 | Mar 7, 2013 |
| Wireshark | — | Upgrade to Wireshark version 1.8.6Upgrade to Wireshark version 1.6.14 | Oct 4, 2017 | Mar 7, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub