PT-2014-1750 · Wireshark+4 · Wireshark+4

Publicado

2014-09-18

·

Atualizado

2024-06-15

·

CVE-2014-6431

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.9 Wireshark versions 1.12.x through 1.12.0
Description The issue is related to a buffer overflow in the SnifferDecompress function in the DOS Sniffer file parser. This allows remote attackers to cause a denial of service, resulting in the application crashing, by using a specially crafted file that triggers writes of uncompressed bytes beyond the end of the output buffer.
Recommendations For Wireshark versions 1.10.x through 1.10.9, update to version 1.10.10 or later. For Wireshark versions 1.12.x through 1.12.0, update to version 1.12.1 or later.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-2157
BDU:2015-00770
CESA-2014_1676
CVE-2014-6431
DLA-198-1
DSA-3049-1
MGASA-2014-0386
OPENSUSE-SU-2024:10199-1
RHSA-2014:1676
RHSA-2014:1677
RHSA-2014_1676
RHSA-2014_1677
SUSE-SU-2015:0426-1
SUSE-SU-2015:0653-1
SUSE-SU-2015:1098-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Wireshark