Wireshark SSH Dissector Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Wireshark SSH dissector, present in versions 4.4.0 through 4.4.8. This issue allows Wireshark to crash when it processes a malformed packet, either injected onto the network or contained within a packet trace file.

Impact

Exploitation of this vulnerability leads to a crash of the Wireshark application.

Reproduction

The vulnerability can be reproduced by using Wireshark to open a malformed packet trace file that contains SSH data. Alternatively, injecting a malformed SSH packet onto the network can also trigger the crash.

Remediation

Users are advised to upgrade to Wireshark version 4.4.9 or later.