PT-2015-7633 · Wireshark+2 · Wireshark+2
Dario Lombardo
·
Publicado
2015-10-14
·
Atualizado
2024-06-15
·
CVE-2015-7830
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Wireshark versions 1.12.x through 1.12.7
Description
The issue is related to the pcapng parser in Wireshark, where the pcapng read if descr block function uses too many levels of pointer indirection. This allows remote attackers to cause a denial of service, resulting in an incorrect free and application crash, via a crafted packet that triggers interface-filter copying. The problem can also be described as a remote code execution vulnerability due to an arbitrary free in the PCAPNG if filter. A malformed packet can cause a denial of service.
Recommendations
For Wireshark versions 1.12.x through 1.12.7, update to version 1.12.8 or later to resolve the issue.
As a temporary workaround, consider disabling the pcapng file parser until a patch is available.
Restrict access to crafted packets to minimize the risk of exploitation.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Wireshark