PT-2020-6575
CVE-2020-13164
·
تاريخ النشر
2020-05-19
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.6.0 through 2.6.16
Wireshark versions 3.0.0 through 3.0.10
Wireshark versions 3.2.0 through 3.2.3
Description
The issue is related to uncontrolled recursion in the NFS dissector, which could allow a remote attacker to cause a denial of service. The problem occurs due to excessive recursion, such as when encountering a cycle in the directory graph on a filesystem. This can lead to a crash of the NFS dissector.
Recommendations
For Wireshark versions 2.6.0 through 2.6.16, update the epan/dissectors/packet-nfs.c file to prevent excessive recursion.
For Wireshark versions 3.0.0 through 3.0.10, update the epan/dissectors/packet-nfs.c file to prevent excessive recursion.
For Wireshark versions 3.2.0 through 3.2.3, update the epan/dissectors/packet-nfs.c file to prevent excessive recursion.
As a temporary workaround, consider disabling the NFS dissector until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾