PT-2018-18061 · Wireshark+2 · Wireshark+2

Jakub Zawadzki · Publicado 2018-02-23 · Atualizado 2020-10-28 · CVE-2018-7421

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.12 Wireshark versions 2.4.0 through 2.4.4

Description The DMP dissector in Wireshark could enter an infinite loop due to incorrect support for a bounded number of Security Categories for a DMP Security Classification.

Recommendations For Wireshark versions 2.2.0 through 2.2.12, update to a version that correctly supports a bounded number of Security Categories for a DMP Security Classification. For Wireshark versions 2.4.0 through 2.4.4, update to a version that correctly supports a bounded number of Security Categories for a DMP Security Classification.

Exploit

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2018-1290

CVE-2018-7421

SUSE-SU-2018:0811-1

SUSE-SU-2018:0867-1

Produtos afetados

Alt Linux

Suse

Wireshark

Referências · 72

• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14408 · Exploit
• https://osv.dev/vulnerability/CVE-2018-7421 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7421 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7337 · Nota de Segurança
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=656812ee1f2a8ddfd383b02a066e888f5919e17a · Nota
• https://suse.com/security/cve/CVE-2018-7327 · Nota
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14419 · Nota
• https://cve.org/CVERecord?id=CVE-2018-7421 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-7323 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7326 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-7337 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7321 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2018-7421 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2018/suse-su-20180867-1 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6836 · Nota de Segurança