PT-2019-5366 · Wireshark+3 · Wireshark+3

Published 2018-04-03 · Updated 2024-06-15 · CVE-2019-10901

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.13 Wireshark versions 2.6.0 through 2.6.7 Wireshark version 3.0.0

Description The issue is related to a null pointer dereference in the Local Download Sharing Service (LDSS) dissector of the Wireshark network traffic analyzer. Exploitation of this issue could allow a remote attacker to cause a denial of service. The problem was caused by improper handling of file digests.

Recommendations For Wireshark versions 2.4.0 through 2.4.13, update to a version where the LDSS dissector properly handles file digests. For Wireshark versions 2.6.0 through 2.6.7, update to a version where the LDSS dissector properly handles file digests. For Wireshark version 3.0.0, update to a version where the LDSS dissector properly handles file digests.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2018-1549

ALT-PU-2019-1633

BDU:2020-02573

CVE-2019-10901

DLA-1802-1

DLA-2423-1

OPENSUSE-SU-2019:1356-1

OPENSUSE-SU-2019_1356-1

OPENSUSE-SU-2019_1390-1

OPENSUSE-SU-2020:0362-1

OPENSUSE-SU-2020_0362-1

OPENSUSE-SU-2024:11513-1

SUSE-SU-2019:1036-1

SUSE-SU-2019:1038-1

SUSE-SU-2020:0693-1

USN-3986-1

Affected Products

Alt Linux

Suse

Ubuntu

Wireshark

References · 467

• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620 · Exploit
• https://bdu.fstec.ru/vul/2019-01559 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10903 · Security Note
• https://bdu.fstec.ru/vul/2022-00215 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9272 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9258 · Security Note
• https://bdu.fstec.ru/vul/2022-00269 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:0693-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02571 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1038-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2019-1633 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02716 · Security Note
• https://osv.dev/vulnerability/DLA-2423-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-2423-1 · Vendor Advisory