PT-2018-18938 · Wireshark+2 · Wireshark+2

Publicado

2018-02-28

·

Atualizado

2024-06-15

·

CVE-2018-9260

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5
Description The IEEE 802.15.4 dissector in Wireshark could crash due to an issue with allocation. This was fixed by ensuring an allocation step occurs in the epan/dissectors/packet-ieee802154.c file.
Recommendations For Wireshark versions 2.2.0 through 2.2.13, update to a version where the allocation step in epan/dissectors/packet-ieee802154.c is ensured. For Wireshark versions 2.4.0 through 2.4.5, update to a version where the allocation step in epan/dissectors/packet-ieee802154.c is ensured.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-1549
CVE-2018-9260
DLA-1388-1
DLA-1634-1
MGASA-2018-0151
OPENSUSE-SU-2024:11513-1
SUSE-SU-2018:0980-1
SUSE-SU-2018:0981-1

Produtos afetados

Alt Linux
Suse
Wireshark