PT-2018-2636 · Wireshark+2 · Wireshark+2
Publicado
2018-10-07
·
Atualizado
2024-06-15
·
CVE-2018-18226
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.6.0 through 2.6.3
Description
The issue is related to an uncontrolled consumption of resources in the Wireshark traffic analyzer program. This could allow a remote attacker to cause a denial of service. The problem was specifically found in the Steam IHS Discovery dissector.
Recommendations
For Wireshark versions 2.6.0 through 2.6.3, update the memory-management approach in the epan/dissectors/packet-steam-ihs-discovery.c file to address the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Wireshark