PT-2018-12458 · Wireshark+2 · Wireshark+2

Peter Wu

·

Publicado

2018-04-03

·

Atualizado

2024-06-15

·

CVE-2018-14342

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1
Description The BGP protocol dissector in Wireshark could enter a large loop due to invalid Path Attribute lengths. This issue was resolved by adding validation for these lengths in the dissector code.
Recommendations For Wireshark versions 2.2.0 through 2.2.15, update to a version that includes the fix for the BGP protocol dissector. For Wireshark versions 2.4.0 through 2.4.7, update to a version that includes the fix for the BGP protocol dissector. For Wireshark versions 2.6.0 through 2.6.1, update to a version that includes the fix for the BGP protocol dissector.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-834

Identificadores relacionados

ALT-PU-2018-1549
ALT-PU-2018-2048
ALT-PU-2018-2487
CVE-2018-14342
DLA-1451-1
MGASA-2018-0320
OPENSUSE-SU-2018_2184-1
OPENSUSE-SU-2018_2188-1
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2018:2301-1
SUSE-SU-2018:2412-1
SUSE-SU-2018:2891-1
SUSE-SU-2018:2891-2
SUSE-SU-2020:0693-1

Produtos afetados

Alt Linux
Suse
Wireshark