PT-2018-12459
CVE-2018-14343
·
تاريخ النشر
2018-04-03
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.2.0 through 2.2.15
Wireshark versions 2.4.0 through 2.4.7
Wireshark versions 2.6.0 through 2.6.1
Description
The issue concerns a potential crash in the ASN.1 BER dissector. This crash could occur due to length values exceeding the maximum signed integer. The problem was resolved by modifying the
epan/dissectors/packet-ber.c file to prevent such overflows.Recommendations
For Wireshark versions 2.2.0 through 2.2.15, update to a version where the fix has been applied.
For Wireshark versions 2.4.0 through 2.4.7, update to a version where the fix has been applied.
For Wireshark versions 2.6.0 through 2.6.1, update to a version where the fix has been applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾