Wireshark HTTP3 Dissector Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Wireshark version 4.2.0, where the HTTP3 dissector crashes when processing malformed QPACK data. This issue can be triggered by injecting problematic packets or by opening a crafted capture file that contains the malformed data.

Impact

Exploitation of this vulnerability leads to a crash of the Wireshark application.

Reproduction

The vulnerability can be reproduced by opening a specific capture file, 'crash_with_keys.pcapng', with Wireshark 4.2.0. The file contains malformed HTTP3 packets that cause the application to crash during QPACK stream processing.

Remediation

Users can upgrade to Wireshark version 4.2.1 or later to address this vulnerability.