PT-2018-18940 · Wireshark+2 · Wireshark+2

Publicado

2018-02-28

·

Atualizado

2024-06-15

·

CVE-2018-9262

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5
Description The issue concerns a potential crash in the VLAN dissector. This was due to excessive recursion depth caused by VLAN tag nesting. The problem was addressed by limiting the VLAN tag nesting to restrict recursion depth.
Recommendations For Wireshark versions 2.2.0 through 2.2.13, update to a version that includes the fix in epan/dissectors/packet-vlan.c. For Wireshark versions 2.4.0 through 2.4.5, update to a version that includes the fix in epan/dissectors/packet-vlan.c.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-1549
CVE-2018-9262
DLA-1634-1
MGASA-2018-0151
OPENSUSE-SU-2024:11513-1
SUSE-SU-2018:0980-1
SUSE-SU-2018:0981-1

Produtos afetados

Alt Linux
Suse
Wireshark