PT-2015-4721
CVE-2015-0562
·
تاريخ النشر
2015-01-09
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Wireshark versions 1.10.x through 1.10.11
Wireshark versions 1.12.x through 1.12.2
Description
The issue is related to multiple use-after-free vulnerabilities in the DEC DNA Routing Protocol dissector. These vulnerabilities can be exploited by remote attackers to cause a denial of service, resulting in an application crash, via a crafted packet. The problem arises from the use of packet-scope memory instead of pinfo-scope memory.
Recommendations
For Wireshark versions 1.10.x through 1.10.11, update to version 1.10.12 or later.
For Wireshark versions 1.12.x through 1.12.2, update to version 1.12.3 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾