PT-2018-18935
CVE-2018-9257
·
تاريخ النشر
2018-04-03
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.4.0 through 2.4.5
Description
The issue arises in the CQL dissector, which could enter an infinite loop. This was resolved by adding a check for a nonzero number of columns in the dissector code.
Recommendations
For Wireshark versions 2.4.0 through 2.4.5, update to a version where the fix has been applied, specifically where the code in epan/dissectors/packet-cql.c has been modified to check for a nonzero number of columns.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾