PT-2019-5760 · Wireshark+3 · Wireshark+3

Publicado

2019-08-02

·

Atualizado

2024-06-15

·

CVE-2019-19553

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.6.0 through 2.6.12 Wireshark versions 3.0.0 through 3.0.6
Description The issue is related to the CMS dissector in Wireshark, which could crash due to a lack of resource initialization. This could allow a remote attacker to cause a denial of service. The problem was addressed by ensuring that an object identifier is set to NULL after a ContentInfo dissection in the file epan/dissectors/asn1/cms/packet-cms-template.c.
Recommendations For Wireshark versions 2.6.0 through 2.6.12, update to a version where the CMS dissector issue is fixed. For Wireshark versions 3.0.0 through 3.0.6, update to a version where the CMS dissector issue is fixed. As a temporary workaround, consider restricting the use of the CMS dissector until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-909

Identificadores relacionados

ALT-PU-2019-3248
ALT-PU-2020-1203
BDU:2021-01456
CVE-2019-19553
DLA-2547-1
MGASA-2019-0384
OESA-2021-1132
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2020:0693-1

Produtos afetados

Alt Linux
Astra Linux
Suse
Wireshark