PT-2018-18060 · Wireshark+2 · Wireshark+2

Magnus Stubman

·

Publicado

2018-02-23

·

Atualizado

2024-06-15

·

CVE-2018-7420

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.12 Wireshark versions 2.4.0 through 2.4.4
Description The issue is related to the pcapng file parser, which could crash due to a lack of block-size check for sysdig event blocks. This could potentially allow an attacker to cause a denial of service by using a malformed packet trace file.
Recommendations For Wireshark versions 2.2.0 through 2.2.12, update to a version that includes the fix in wiretap/pcapng.c. For Wireshark versions 2.4.0 through 2.4.4, update to a version that includes the fix in wiretap/pcapng.c. As a temporary workaround, consider avoiding the use of pcapng files from untrusted sources until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2018-1290
ALT-PU-2018-2487
CVE-2018-7420
DLA-1353-1
DLA-1634-1
MGASA-2018-0151
OPENSUSE-SU-2024:11513-1
SUSE-SU-2018:0811-1
SUSE-SU-2018:0867-1

Produtos afetados

Alt Linux
Suse
Wireshark