Wireshark LBMC reassembly bug allows remote code execution
Original title: ZDI-26-899: Wireshark LBMC Fragment Reassembly Integer Overflow Remote Code Execution Vulnerability
Only Wireshark installs with LBMC fragment reassembly enabled are affected; ZDI rates it CVSS 7.5.
ZDI-26-899 describes an integer overflow in Wireshark LBMC fragment reassembly that lets remote attackers execute arbitrary code. Authentication is not required, but the flaw applies only when LBMC fragment reassembly is enabled. ZDI assigned a CVSS rating of 7.5. Affected and fixed versions are not stated in the snippet.
Unconfirmed: The snippet does not state affected versions, a fix, or whether the flaw is exploited.
- Exploitation does not require authentication.
- Instances without LBMC fragment reassembly enabled are not vulnerable.
- ZDI assigned CVSS 7.5.
Impact: Unauthenticated remote arbitrary code execution
| Product | Affected |
|---|---|
| Wireshark | — |
- Vendors
- Wireshark
- Organizations
- Zero Day Initiative
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark. Authentication is not required to exploit this vulnerability. However, only instances with LBMC fragment reassembly enabled are vulnerable.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.