PT-2018-12457 · Wireshark+4 · Wireshark+4

Buildbot Builder

·

Publicado

2018-04-03

·

Atualizado

2024-06-15

·

CVE-2018-14341

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1
Description The issue is related to the DICOM dissector, which could enter a large or infinite loop due to an offset overflow. This was fixed by modifying the packet-dcm.c file in the epan/dissectors directory to prevent the overflow.
Recommendations For Wireshark versions 2.2.0 through 2.2.15, update to a version that includes the fix for the DICOM dissector issue. For Wireshark versions 2.4.0 through 2.4.7, update to a version that includes the fix for the DICOM dissector issue. For Wireshark versions 2.6.0 through 2.6.1, update to a version that includes the fix for the DICOM dissector issue.

Correção

Integer Overflow

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190CWE-835

Identificadores relacionados

ALT-PU-2018-1549
ALT-PU-2018-2048
ALT-PU-2018-2487
CESA-2020_1047
CVE-2018-14341
DLA-1451-1
MGASA-2018-0320
OPENSUSE-SU-2018_2184-1
OPENSUSE-SU-2018_2188-1
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
RHSA-2020:1047
RHSA-2020_1047
SUSE-SU-2018:2301-1
SUSE-SU-2018:2412-1
SUSE-SU-2018:2891-1
SUSE-SU-2018:2891-2
SUSE-SU-2020:0693-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Wireshark