PT-2017-17092 · Wireshark+1 · Wireshark+1

Publicado

2017-03-03

·

Atualizado

2024-06-15

·

CVE-2017-6472

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.10 Wireshark versions 2.2.0 through 2.2.4
Description The issue is related to an infinite loop in the RTMPT dissector, which can be triggered by packet injection or a malformed capture file. This was addressed by properly incrementing a certain sequence value in the epan/dissectors/packet-rtmpt.c file.
Recommendations For Wireshark versions 2.0.0 through 2.0.10, update to a version where the issue is fixed by properly incrementing the sequence value in the epan/dissectors/packet-rtmpt.c file. For Wireshark versions 2.2.0 through 2.2.4, update to a version where the issue is fixed by properly incrementing the sequence value in the epan/dissectors/packet-rtmpt.c file.

Correção

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-1260
CVE-2017-6472
DLA-858-1
DSA-3811-1
MGASA-2017-0113
OPENSUSE-SU-2024:11513-1

Produtos afetados

Alt Linux
Wireshark