PT-2019-5366 · Wireshark+3 · Wireshark+3

Publicado

2018-04-03

·

Atualizado

2024-06-15

·

CVE-2019-10901

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.13 Wireshark versions 2.6.0 through 2.6.7 Wireshark version 3.0.0
Description The issue is related to a null pointer dereference in the Local Download Sharing Service (LDSS) dissector of the Wireshark network traffic analyzer. Exploitation of this issue could allow a remote attacker to cause a denial of service. The problem was caused by improper handling of file digests.
Recommendations For Wireshark versions 2.4.0 through 2.4.13, update to a version where the LDSS dissector properly handles file digests. For Wireshark versions 2.6.0 through 2.6.7, update to a version where the LDSS dissector properly handles file digests. For Wireshark version 3.0.0, update to a version where the LDSS dissector properly handles file digests.

Exploit

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2018-1549
ALT-PU-2019-1633
BDU:2020-02573
CVE-2019-10901
DLA-1802-1
DLA-2423-1
OPENSUSE-SU-2019:1356-1
OPENSUSE-SU-2019_1356-1
OPENSUSE-SU-2019_1390-1
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2019:1036-1
SUSE-SU-2019:1038-1
SUSE-SU-2020:0693-1
USN-3986-1

Produtos afetados

Alt Linux
Suse
Ubuntu
Wireshark