PT-2018-12456 · Wireshark+4 · Wireshark+4

Peter Wu

·

Publicado

2018-04-03

·

Atualizado

2024-06-15

·

CVE-2018-14340

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1
Description The issue concerns dissectors that support zlib decompression, which could crash due to a buffer over-read when encountering negative lengths. This was addressed by rejecting negative lengths.
Recommendations For Wireshark versions 2.2.0 through 2.2.15, update to a version that includes the fix in epan/tvbuff zlib.c. For Wireshark versions 2.4.0 through 2.4.7, update to a version that includes the fix in epan/tvbuff zlib.c. For Wireshark versions 2.6.0 through 2.6.1, update to a version that includes the fix in epan/tvbuff zlib.c.

Exploit

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1549
ALT-PU-2018-2048
ALT-PU-2018-2487
CESA-2020_1047
CVE-2018-14340
DLA-1451-1
MGASA-2018-0320
OPENSUSE-SU-2018_2184-1
OPENSUSE-SU-2018_2188-1
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
RHSA-2020:1047
RHSA-2020_1047
SUSE-SU-2018:2301-1
SUSE-SU-2018:2412-1
SUSE-SU-2018:2891-1
SUSE-SU-2018:2891-2
SUSE-SU-2020:0693-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Wireshark