PT-2018-2714 · Wireshark+2 · Wireshark+2
Published
2018-10-18
·
Updated
2024-06-15
·
CVE-2019-5716
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.6.0 through 2.6.5
Description
The issue is related to the 6LoWPAN dissector in Wireshark, which could crash due to the use of a TVB before its creation. This could potentially allow a remote attacker to cause a denial of service.
Recommendations
For Wireshark versions 2.6.0 through 2.6.5, update to a version where the issue has been addressed, such as by applying the fix in epan/dissectors/packet-6lowpan.c that avoids using a TVB before its creation.
As a temporary workaround, consider disabling the 6LoWPAN dissector until a patch is available.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Suse
Wireshark