PT-2015-5650 · Wireshark+4 · Wireshark+4

Publicado

2015-03-06

·

Atualizado

2024-06-15

·

CVE-2015-2188

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.12 Wireshark versions 1.12.x through 1.12.3
Description The issue arises from improper initialization of a data structure in the WCP dissector, allowing remote attackers to cause a denial of service. This can be achieved through a crafted packet that is not handled correctly during decompression, resulting in an out-of-bounds read and application crash.
Recommendations For Wireshark versions 1.10.x through 1.10.12, update to version 1.10.13 or later. For Wireshark versions 1.12.x through 1.12.3, update to version 1.12.4 or later.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

ALT-PU-2015-1264
CESA-2015_2393
CVE-2015-2188
DLA-198-1
DSA-3210-1
MGASA-2015-0117
OPENSUSE-SU-2024:10199-1
RHSA-2015:2393
RHSA-2015_2393
SUSE-SU-2015:0426-1
SUSE-SU-2015:0653-1
SUSE-SU-2015:0657-1
SUSE-SU-2015:0657-2
SUSE-SU-2015:1098-1
SUSE-SU-2015_0653-1
SUSE-SU-2015_0657-1
SUSE-SU-2015_0657-2

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Wireshark