PT-2016-6962 · Wireshark+2 · Wireshark+2

Chris Benedict · Publicado 2016-08-06 · Atualizado 2016-11-28 · CVE-2016-6507

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.12

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via a crafted packet. This is related to the MMSE dissector in the epan/dissectors/packet-mmse.c file.

Recommendations For Wireshark versions 1.12.x through 1.12.12, update to version 1.12.13 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2016-1901

CVE-2016-6507

DLA-595-1

DSA-3648-1

SUSE-SU-2016:2212-1

SUSE-SU-2016:2453-1

Produtos afetados

Alt Linux

Suse

Wireshark

Referências · 63

• https://bugzilla.suse.com/991012 · Nota
• https://wireshark.org/security/wnpa-sec-2016-43.html · Nota
• https://bugzilla.suse.com/991015 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6511 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-5354 · Nota
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12624 · Nota
• https://suse.com/security/cve/CVE-2016-6504 · Nota
• http://openwall.com/lists/oss-security/2016/07/28/3 · Nota
• https://security-tracker.debian.org/tracker/CVE-2016-6507 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2016-6507 · Nota
• https://bugzilla.suse.com/991019 · Nota
• http://securitytracker.com/id/1036480 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6512 · Nota de Segurança
• https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b5a10743258bd016c07ebf6479137fda3d172a0f · Nota
• https://suse.com/security/cve/CVE-2016-6511 · Nota