PT-2019-5367 · Wireshark+3 · Wireshark+3

Mateusz Jurczyk

·

Publicado

2018-04-03

·

Atualizado

2024-06-15

·

CVE-2019-10903

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.13 Wireshark versions 2.6.0 through 2.6.7 Wireshark version 3.0.0
Description The issue is related to the DCERPC SPOOLSS dissector in Wireshark, which could crash due to errors in resource management. This could potentially allow a remote attacker to cause a denial of service. The problem was addressed by adding a boundary check in the dissector code.
Recommendations For Wireshark versions 2.4.0 through 2.4.13, update to a version that includes the fix in epan/dissectors/packet-dcerpc-spoolss.c. For Wireshark versions 2.6.0 through 2.6.7, update to a version that includes the fix in epan/dissectors/packet-dcerpc-spoolss.c. For Wireshark version 3.0.0, update to a version that includes the fix in epan/dissectors/packet-dcerpc-spoolss.c.

Exploit

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399CWE-125

Identificadores relacionados

ALT-PU-2018-1549
ALT-PU-2019-1633
BDU:2020-02574
CVE-2019-10903
DLA-1802-1
DLA-2423-1
OPENSUSE-SU-2019:1356-1
OPENSUSE-SU-2019_1356-1
OPENSUSE-SU-2019_1390-1
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2019:1036-1
SUSE-SU-2019:1038-1
SUSE-SU-2020:0693-1
USN-3986-1

Produtos afetados

Alt Linux
Suse
Ubuntu
Wireshark