PT-2018-12469 · Wireshark+2 · Wireshark+2

Jyr…@‍Gma…

·

Publicado

2018-04-03

·

Atualizado

2024-06-15

·

CVE-2018-14369

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1
Description The HTTP2 dissector in Wireshark could crash due to improper handling of header data. This issue was resolved by verifying that header data was found before proceeding to header decompression in the file epan/dissectors/packet-http2.c.
Recommendations For Wireshark versions 2.2.0 through 2.2.15, update to a version that includes the fix for the HTTP2 dissector crash. For Wireshark versions 2.4.0 through 2.4.7, update to a version that includes the fix for the HTTP2 dissector crash. For Wireshark versions 2.6.0 through 2.6.1, update to a version that includes the fix for the HTTP2 dissector crash.

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-1549
ALT-PU-2018-2048
ALT-PU-2018-2487
CVE-2018-14369
DLA-1451-1
MGASA-2018-0320
OPENSUSE-SU-2018_2184-1
OPENSUSE-SU-2018_2188-1
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2018:2301-1
SUSE-SU-2018:2412-1
SUSE-SU-2018:2891-1
SUSE-SU-2018:2891-2
SUSE-SU-2020:0693-1

Produtos afetados

Alt Linux
Suse
Wireshark