PT-2023-16438 · Wireshark+5 · Wireshark+5
Publicado
2023-05-18
·
Atualizado
2025-01-07
·
CVE-2023-0666
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Wireshark versions 4.0.5 and prior
Description
The issue is due to a failure in validating the length provided by an attacker-crafted RTPS packet, making Wireshark susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
Recommendations
For Wireshark versions 4.0.5 and prior, update to a version that includes the fix for this issue to prevent potential code execution.
As a temporary workaround, consider disabling the handling of RTPS packets in Wireshark until a patch is available.
Exploit
Correção
Memory Corruption
Heap Based Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Centos
Red Hat
Suse
Wireshark