PT-2019-5383 · Wireshark+2 · Wireshark+2
Publicado
2019-04-09
·
Atualizado
2024-06-15
·
CVE-2019-10897
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Wireshark version 3.0.0
Description
The issue is related to the IEEE 802.11 dissector in Wireshark, which could enter an infinite loop due to errors in resource management. This could potentially allow a remote attacker to cause a denial of service. The problem was addressed by detecting cases where the bit offset does not advance.
Recommendations
For Wireshark version 3.0.0, update the epan/dissectors/packet-ieee80211.c component to include the fix that detects cases where the bit offset does not advance, preventing the infinite loop.
Exploit
Correção
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Wireshark