PT-2016-7739 · Wireshark+2 · Wireshark+2

Publicado 2016-11-17 · Atualizado 2024-06-15 · CVE-2016-9375

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.7 Wireshark versions 2.2.0 through 2.2.1

Description The issue arises in the DTN dissector, which can enter an infinite loop due to network traffic or a capture file. This occurs when the SDNV evaluation is not successful.

Recommendations For Wireshark versions 2.0.0 through 2.0.7, update to a version where the DTN dissector issue is fixed by properly checking SDNV evaluation success. For Wireshark versions 2.2.0 through 2.2.1, update to a version where the DTN dissector issue is fixed by properly checking SDNV evaluation success.

Correção

RCE

Enumeração de Fraquezas

CWE-399

CWE-20

Identificadores relacionados

ALT-PU-2016-2325

CVE-2016-9375

DLA-714-1

DSA-3719-1

MGASA-2016-0391

OPENSUSE-SU-2024:10199-1

SUSE-SU-2017:1174-1

SUSE-SU-2017:1442-1

Produtos afetados

Alt Linux

Suse

Wireshark

Referências · 342

• https://suse.com/security/cve/CVE-2012-5592 · Nota
• https://suse.com/security/cve/CVE-2013-1576 · Nota
• https://suse.com/security/cve/CVE-2013-2483 · Nota
• https://suse.com/security/cve/CVE-2013-1578 · Nota
• https://suse.com/security/cve/CVE-2015-6248 · Nota
• https://suse.com/security/cve/CVE-2013-6338 · Nota
• https://suse.com/security/cve/CVE-2015-8720 · Nota
• https://suse.com/security/cve/CVE-2015-6249 · Nota
• https://suse.com/security/cve/CVE-2017-7745 · Nota
• https://wireshark.org/security/wnpa-sec-2016-62.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-3483 · Nota
• https://security-tracker.debian.org/tracker/CVE-2016-9375 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2009-1269 · Nota
• https://suse.com/security/cve/CVE-2017-7701 · Nota
• https://suse.com/security/cve/CVE-2015-6242 · Nota