PT-2014-1754 · Wireshark+4 · Wireshark+4

Lewis

·

Publicado

2014-09-18

·

Atualizado

2024-06-15

·

CVE-2014-6432

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.9 Wireshark versions 1.12.x through 1.12.0
Description The issue exists in the SnifferDecompress function in the DOS Sniffer file parser, which does not prevent data overwrites during copy operations. This allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted file.
Recommendations For Wireshark versions 1.10.x through 1.10.9, update to version 1.10.10 or later. For Wireshark versions 1.12.x through 1.12.0, update to version 1.12.1 or later.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2014-2157
BDU:2015-00774
CESA-2014_1676
CVE-2014-6432
DLA-198-1
DSA-3049-1
MGASA-2014-0386
OPENSUSE-SU-2024:10199-1
RHSA-2014:1676
RHSA-2014:1677
RHSA-2014_1676
RHSA-2014_1677
SUSE-SU-2015:0426-1
SUSE-SU-2015:0653-1
SUSE-SU-2015:1098-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Wireshark