PT-2019-5364 · Wireshark+3 · Wireshark+3

Published 2018-04-03 · Updated 2024-06-15 · CVE-2019-10896

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.13 Wireshark versions 2.6.0 through 2.6.7 Wireshark version 3.0.0

Description The issue is related to errors in resource management in the DOF Dissector component of the Wireshark network traffic analyzer. It could allow a remote attacker to cause a denial of service. The problem was addressed by properly handling generated IID and OID bytes in the dissector.

Recommendations For Wireshark versions 2.4.0 through 2.4.13, update the epan/dissectors/packet-dof.c file to properly handle generated IID and OID bytes. For Wireshark versions 2.6.0 through 2.6.7, update the epan/dissectors/packet-dof.c file to properly handle generated IID and OID bytes. For Wireshark version 3.0.0, update the epan/dissectors/packet-dof.c file to properly handle generated IID and OID bytes.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-399

CWE-787

Related Identifiers

ALT-PU-2018-1549

ALT-PU-2019-1633

BDU:2020-02571

CVE-2019-10896

DLA-2423-1

OPENSUSE-SU-2019:1356-1

OPENSUSE-SU-2019_1356-1

OPENSUSE-SU-2019_1390-1

OPENSUSE-SU-2020:0362-1

OPENSUSE-SU-2020_0362-1

OPENSUSE-SU-2024:11513-1

SUSE-SU-2019:1036-1

SUSE-SU-2019:1038-1

SUSE-SU-2020:0693-1

USN-3986-1

Affected Products

Alt Linux

Suse

Ubuntu

Wireshark

References · 464

• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617 · Exploit
• https://bdu.fstec.ru/vul/2019-01559 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10903 · Security Note
• https://bdu.fstec.ru/vul/2022-00215 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9272 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9258 · Security Note
• https://bdu.fstec.ru/vul/2022-00269 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:0693-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02571 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1038-1 · Vendor Advisory
• https://wireshark.org/security/wnpa-sec-2019-15.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2019-1633 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02716 · Security Note
• https://osv.dev/vulnerability/DLA-2423-1 · Vendor Advisory