PT-2013-3814
CVE-2013-2481
·
تاريخ النشر
2013-03-07
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
2.9
منخفضةالمقاييسAV:A/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Wireshark versions 1.6.x through 1.6.13
Wireshark versions 1.8.x through 1.8.5
Description
The issue is related to an integer signedness error in the dissect mount dirpath call function in the Mount dissector. When nfs file name snooping is enabled, remote attackers can cause a denial of service, leading to an application crash, by providing a negative length value.
Recommendations
For Wireshark versions 1.6.x through 1.6.13, update to version 1.6.14 or later.
For Wireshark versions 1.8.x through 1.8.5, update to version 1.8.6 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾