PT-2012-5312 · Wireshark+3 · Wireshark+3

Laurent Butti

·

Publicado

2012-08-16

·

Atualizado

2024-06-15

·

CVE-2012-4285

CVSS v2.0

3.3

Baixa

VetorAV:A/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.14 Wireshark versions 1.6.x through 1.6.9 Wireshark versions 1.8.x through 1.8.1
Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a zero-length message. This is due to a problem in the dissect pft function in the DCP ETSI dissector.
Recommendations For Wireshark versions 1.4.x through 1.4.14, update to version 1.4.15 or later. For Wireshark versions 1.6.x through 1.6.9, update to version 1.6.10 or later. For Wireshark versions 1.8.x through 1.8.1, update to version 1.8.2 or later.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CESA-2013_1569
CVE-2012-4285
OPENSUSE-SU-2024:10199-1
RHSA-2013:0125
RHSA-2013:1569
RHSA-2013_0125
RHSA-2013_1569

Produtos afetados

Centos
Red Hat
Suse
Wireshark