Описание
IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
A flaw was found in Wireshark. An attacker could exploit this vulnerability by convincing a user to open a specially crafted packet capture file or by injecting malformed IEEE 802.11 wireless network traffic. Processing these invalid packets causes an application crash in the protocol dissector, resulting in a Denial of Service (DoS).
Меры по смягчению последствий
Disable the IEEE 802.11 dissector in Wireshark or avoid processing packet captures from untrusted sources.
- Dissector configuration:
- In the Wireshark graphical interface, navigate to Analyze -> Enabled Protocols, search for "IEEE 802.11", and deselect it.
- When using command-line tools like TShark, disable the protocol using the
--disable-protocolflag:tshark --disable-protocol wlan -r capture.pcap
- Operational controls: Avoid opening capture files from untrusted sources or capturing live traffic on untrusted wireless networks.
- Package removal:
If packet analysis tools are not required on the system, remove the package:
sudo dnf remove wiresharkCaveats: Disabling the IEEE 802.11 protocol prevents parsing and decoding of wireless frame structures, leaving traffic presented only as raw payload data. Removing the package removes Wireshark binaries and associated CLI tools.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 6 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 7 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 8 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 9 | wireshark | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4. ...
IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Уязвимость функции Dot11DecryptFtMicCheck() (epan/crypt/dot11decrypt.c) анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызывать отказ в обслуживании
EPSS
5.5 Medium
CVSS3