PT-2018-12454 · Wireshark+2 · Wireshark+2

Buildbot Builder

·

Publicado

2018-04-03

·

Atualizado

2024-06-15

·

CVE-2018-14339

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1
Description The issue arises from the MMSE dissector potentially entering an infinite loop. This was resolved by adding offset and length validation in epan/proto.c.
Recommendations For Wireshark versions 2.2.0 through 2.2.15, update to a version that includes the fix for the MMSE dissector infinite loop issue. For Wireshark versions 2.4.0 through 2.4.7, update to a version that includes the fix for the MMSE dissector infinite loop issue. For Wireshark versions 2.6.0 through 2.6.1, update to a version that includes the fix for the MMSE dissector infinite loop issue.

Correção

RCE

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20CWE-835

Identificadores relacionados

ALT-PU-2018-1549
ALT-PU-2018-2048
ALT-PU-2018-2487
CVE-2018-14339
DLA-1451-1
MGASA-2018-0320
OPENSUSE-SU-2018_2184-1
OPENSUSE-SU-2018_2188-1
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2018:2301-1
SUSE-SU-2018:2412-1
SUSE-SU-2018:2891-1
SUSE-SU-2018:2891-2
SUSE-SU-2018_2301-1
SUSE-SU-2020:0693-1

Produtos afetados

Alt Linux
Suse
Wireshark