PT-2014-1762 · Wireshark+3 · Wireshark+3
Publicado
2014-09-18
·
Atualizado
2024-06-15
·
CVE-2014-6425
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Wireshark versions 1.12.x through 1.12.0
Description
The issue affects the CUPS dissector in Wireshark, specifically the
get quoted string and get unquoted string functions in epan/dissectors/packet-cups.c. It allows remote attackers to cause a denial of service, resulting in a buffer over-read and application crash, via a CUPS packet that lacks a trailing '0' character.Recommendations
For Wireshark versions 1.12.x through 1.12.0, update to version 1.12.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CUPS dissector until a patch is available.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Wireshark