PT-2019-5766 · Wireshark+4 · Wireshark+4

Dario Lombardo

·

Publicado

2018-04-03

·

Atualizado

2024-06-15

·

CVE-2019-13619

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.15 Wireshark versions 2.6.0 through 2.6.9 Wireshark versions 3.0.0 through 3.0.2
Description The issue is related to the ASN.1 BER dissector and related dissectors in Wireshark, which could crash due to a buffer overflow. This could allow a remote attacker to cause a denial of service. The problem was addressed by properly restricting buffer increments in the epan/asn1.c file.
Recommendations For Wireshark versions 2.4.0 through 2.4.15, update to a version that includes the fix for the buffer overflow issue in the ASN.1 BER dissector. For Wireshark versions 2.6.0 through 2.6.9, update to a version that includes the fix for the buffer overflow issue in the ASN.1 BER dissector. For Wireshark versions 3.0.0 through 3.0.2, update to a version that includes the fix for the buffer overflow issue in the ASN.1 BER dissector.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2018-1549
ALT-PU-2019-2326
ALT-PU-2019-3139
BDU:2021-01494
CVE-2019-13619
DLA-2547-1
MGASA-2019-0227
OESA-2021-1132
OPENSUSE-SU-2019:1965-1
OPENSUSE-SU-2019_1965-1
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2019:2103-1
SUSE-SU-2019:2104-1
SUSE-SU-2019_2103-1
SUSE-SU-2019_2104-1
SUSE-SU-2020:0693-1
USN-4133-1

Produtos afetados

Alt Linux
Astra Linux
Suse
Ubuntu
Wireshark