PT-2017-16601 · Wireshark+2 · Wireshark+2

Publicado

2017-01-25

·

Atualizado

2024-06-15

·

CVE-2017-5596

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.9 Wireshark versions 2.2.0 through 2.2.3
Description The issue arises from the ASTERIX dissector, which can enter an infinite loop due to packet injection or a malformed capture file, potentially caused by an integer overflow.
Recommendations For Wireshark versions 2.0.0 through 2.0.9, update to a version where the issue is fixed by changing the data type in epan/dissectors/packet-asterix.c to avoid the integer overflow. For Wireshark versions 2.2.0 through 2.2.3, update to a version where the issue is fixed by changing the data type in epan/dissectors/packet-asterix.c to avoid the integer overflow.

Correção

Integer Overflow

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190CWE-835

Identificadores relacionados

ALT-PU-2017-1132
CVE-2017-5596
DLA-858-1
DSA-3811-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2017:1174-1
SUSE-SU-2017:1442-1

Produtos afetados

Alt Linux
Suse
Wireshark