PT-2019-5385 · Wireshark+2 · Wireshark+2

Publicado 2019-04-09 · Atualizado 2024-06-15 · CVE-2019-10902

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark version 3.0.0

Description The issue is related to the TSDNS dissector in Wireshark, which could crash due to errors in resource management. This could potentially allow a remote attacker to cause a denial of service. The problem was addressed by safely splitting strings in the dissector code.

Recommendations For Wireshark version 3.0.0, update the epan/dissectors/packet-tsdns.c file to include the fix that splits strings safely to prevent crashes.

Exploit

Correção

Unchecked Return Value

Enumeração de Fraquezas

CWE-399

CWE-252

Identificadores relacionados

ALT-PU-2019-1633

BDU:2020-02716

CVE-2019-10902

OPENSUSE-SU-2020:0362-1

OPENSUSE-SU-2020_0362-1

OPENSUSE-SU-2024:11513-1

SUSE-SU-2020:0693-1

Produtos afetados

Alt Linux

Suse

Wireshark

Referências · 355

• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619 · Exploit
• https://suse.com/security/cve/CVE-2018-14370 · Nota
• https://suse.com/security/cve/CVE-2020-11647 · Nota
• https://bugzilla.suse.com/1101810 · Nota
• https://suse.com/security/cve/CVE-2020-9429 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-19625.html · Nota
• https://bdu.fstec.ru/vul/2020-02574 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-7700 · Nota
• https://suse.com/security/cve/CVE-2019-19553 · Nota
• https://suse.com/security/cve/CVE-2006-4574 · Nota
• https://suse.com/security/cve/CVE-2018-11356.html · Nota
• https://suse.com/security/cve/CVE-2017-6471 · Nota
• https://suse.com/security/cve/CVE-2020-13164 · Nota
• https://suse.com/security/cve/CVE-2017-13764 · Nota