PT-2019-1909 · Wireshark+3 · Wireshark+3
Publicado
2018-04-03
·
Atualizado
2024-06-15
·
CVE-2019-9209
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.4.0 through 2.4.12
Wireshark versions 2.6.0 through 2.6.6
Description
The issue is related to the ASN.1 BER dissector component in Wireshark, which could cause a crash due to a buffer overflow associated with excessive digits in time values. This can be exploited by a remote attacker to cause a denial of service.
Recommendations
For Wireshark versions 2.4.0 through 2.4.12, update to a version where the issue is fixed by preventing the buffer overflow in the epan/dissectors/packet-ber.c file.
For Wireshark versions 2.6.0 through 2.6.6, update to a version where the issue is fixed by preventing the buffer overflow in the epan/dissectors/packet-ber.c file.
As a temporary workaround, consider restricting the use of the ASN.1 BER dissector component until a patch is available.
Exploit
Correção
Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Ubuntu
Wireshark