Wireshark BPv7 Dissector Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Wireshark version 4.6.0, specifically within the BPv7 dissector. This issue causes a crash when the dissector processes certain malformed packets.

Impact

Exploitation of this vulnerability leads to a crash of the Wireshark application.

Reproduction

The vulnerability can be reproduced by using Wireshark 4.6.0 to open a packet capture file that contains malformed BPv7 data. Alternatively, injecting such a packet onto the network can also trigger the issue.

Remediation

Users are advised to upgrade to Wireshark version 4.6.1 or later.