PT-2019-1725 · Wireshark+3 · Wireshark+3

Dario Lombardo · Publicado 2018-04-03 · Atualizado 2024-06-15 · CVE-2019-9214

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.12 Wireshark versions 2.6.0 through 2.6.6

Description The issue is related to the RPCAP dissector in Wireshark, which could crash due to a NULL conversation dereference. This could potentially allow a remote attacker to cause a denial of service using a specially crafted packet or packet capture file.

Recommendations For Wireshark versions 2.4.0 through 2.4.12, update to a version where the issue is fixed by avoiding the attempted dereference of a NULL conversation in epan/dissectors/packet-rpcap.c. For Wireshark versions 2.6.0 through 2.6.6, update to a version where the issue is fixed by avoiding the attempted dereference of a NULL conversation in epan/dissectors/packet-rpcap.c. As a temporary workaround, consider disabling the RPCAP dissector until a patch is available.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2018-1549

ALT-PU-2019-1411

BDU:2019-01351

CVE-2019-9214

DSA-4416-1

OPENSUSE-SU-2019:1108-1

OPENSUSE-SU-2019_1108-1

OPENSUSE-SU-2019_1390-1

OPENSUSE-SU-2020:0362-1

OPENSUSE-SU-2020_0362-1

OPENSUSE-SU-2024:11513-1

SUSE-SU-2019:0619-1

SUSE-SU-2019:0688-1

SUSE-SU-2020:0693-1

USN-3986-1

Produtos afetados

Alt Linux

Suse

Ubuntu

Wireshark

Referências · 454

• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397 · Nota
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14488 · Nota
• https://suse.com/security/cve/CVE-2018-16057.html · Nota
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14471 · Nota
• https://bdu.fstec.ru/vul/2019-01559 · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-22173 · Nota
• https://suse.com/security/cve/CVE-2017-9344 · Nota
• https://suse.com/security/cve/CVE-2019-9214 · Nota
• https://suse.com/security/cve/CVE-2017-7745 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10903 · Nota de Segurança
• https://suse.com/security/cve/CVE-2019-10900.html · Nota
• https://suse.com/security/cve/CVE-2019-10901 · Nota
• https://wireshark.org/security/wnpa-sec-2019-08.html · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-9214 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-5719 · Nota