PT-2015-6331 · Wireshark+4 · Wireshark+4

Publicado

2015-05-12

·

Atualizado

2024-06-15

·

CVE-2015-3811

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.13 Wireshark versions 1.12.x through 1.12.4
Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted packet. This is due to improper reference to previously processed bytes in the WCP dissector.
Recommendations For Wireshark versions 1.10.x through 1.10.13, update to version 1.10.14 or later. For Wireshark versions 1.12.x through 1.12.4, update to version 1.12.5 or later.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2015-1462
CESA-2015_2393
CESA-2017_0631
CVE-2015-3811
DLA-241-1
DSA-3277-1
MGASA-2015-0223
OPENSUSE-SU-2024:10199-1
RHSA-2015:2393
RHSA-2015_2393
RHSA-2017:0631
RHSA-2017_0631
SUSE-SU-2015:0426-1
SUSE-SU-2015:0653-1
SUSE-SU-2015:1046-1
SUSE-SU-2015:1098-1
SUSE-SU-2015_1046-1
SUSE-SU-2015_1098-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Wireshark