PT-2010-5408 · Wireshark+1 · Wireshark+1

Nephi Johnson

·

Publicado

2010-11-26

·

Atualizado

2024-06-15

·

CVE-2010-4300

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.0 through 1.2.12 Wireshark versions 1.4.0 through 1.4.1
Description The issue is related to a heap-based buffer overflow in the dissect ldss transfer function in the LDSS dissector. This allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.
Recommendations For Wireshark versions 1.2.0 through 1.2.12, update to a version outside of this range to mitigate the risk. For Wireshark versions 1.4.0 through 1.4.1, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider disabling the dissect ldss transfer function until a patch is available.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-4300
OPENSUSE-SU-2024:10199-1
RHSA-2010:0924
RHSA-2010_0924

Produtos afetados

Red Hat
Wireshark