PT-2018-18059 · Wireshark+2 · Wireshark+2

Jakub Zawadzki

·

Publicado

2018-02-23

·

Atualizado

2024-06-15

·

CVE-2018-7419

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.12 Wireshark versions 2.4.0 through 2.4.4
Description The NBAP dissector in Wireshark could crash due to incorrect initialization of the DCH ID. This issue allows attackers to cause a denial of service by using a malformed packet trace file.
Recommendations For Wireshark versions 2.2.0 through 2.2.12, update the nbap.cnf file in epan/dissectors/asn1/nbap/ to ensure DCH ID initialization. For Wireshark versions 2.4.0 through 2.4.4, update the nbap.cnf file in epan/dissectors/asn1/nbap/ to ensure DCH ID initialization. As a temporary workaround, consider disabling the NBAP dissector until a patch is available.

Correção

DoS

Improper Initialization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-665

Identificadores relacionados

ALT-PU-2018-1290
ALT-PU-2018-2487
CVE-2018-7419
DLA-1353-1
DSA-4217-1
MGASA-2018-0151
OPENSUSE-SU-2024:11513-1
SUSE-SU-2018:0811-1
SUSE-SU-2018:0867-1

Produtos afetados

Alt Linux
Suse
Wireshark