Wireshark IEEE 802.11 Protocol Dissector Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12. The issue arises in the IEEE 802.11 protocol dissector, where a stack-buffer-overflow can be triggered by processing malformed packet data. This flaw was discovered by OSS-Fuzz and can cause Wireshark to crash.

Impact

Exploitation of this vulnerability leads to a stack-buffer-overflow, causing a crash of the Wireshark application.

Reproduction

The vulnerability can be reproduced by using Wireshark to open a packet capture file that contains malformed IEEE 802.11 packets. This can be done by injecting such packets onto the network or by using a crafted packet trace file that exploits the dissector's handling of tagged parameters.

Remediation

Users can upgrade to Wireshark versions 4.6.3, 4.4.13 or later to address this vulnerability.