CVE-2014-5162

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.8

Description The issue exists in the read new line function in wiretap/catapult dct2000.c of the Catapult DCT2000 dissector in Wireshark due to incorrect handling of ' ' and 'r' characters. This allows remote attackers to cause a denial of service (off-by-one buffer underflow and application crash) via a specially crafted packet.

Recommendations For Wireshark versions 1.10.x through 1.10.8, update to version 1.10.9 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Catapult DCT2000 dissector until a patch is available.