PT-2014-1747 · Wireshark+4 · Wireshark+4

Publicado

2014-09-05

·

Atualizado

2014-11-05

·

CVE-2014-6421

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.9
Description The issue is related to a use-after-free vulnerability in the SDP dissector. This vulnerability allows remote attackers to cause a denial of service, resulting in an application crash, by sending a crafted packet. The packet exploits split memory ownership between the SDP and RTP dissectors.
Recommendations For Wireshark versions 1.10.x through 1.10.9, update to version 1.10.10 or later to resolve the issue. As a temporary workaround, consider restricting the use of the SDP dissector until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2014-2080
BDU:2015-00767
CESA-2014_1676
CVE-2014-6421
MGASA-2014-0386
RHSA-2014:1676
RHSA-2014:1677
RHSA-2014_1676
RHSA-2014_1677
SUSE-SU-2015:0426-1
SUSE-SU-2015:0653-1
SUSE-SU-2015:1098-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Wireshark