PT-2012-3367 · Wireshark+3 · Wireshark+3
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Wireshark versions 1.4.x through 1.4.11
Wireshark versions 1.6.x through 1.6.5
Description
The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by providing a WTAP ENCAP ERF file that contains an Extension or Multi-Channel header with an invalid pseudoheader size. The problem is related to the pcap and pcap-ng file parsers.
Recommendations
For Wireshark versions 1.4.x through 1.4.11, update to version 1.4.12 or later.
For Wireshark versions 1.6.x through 1.6.5, update to version 1.6.6 or later.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Red Hat
Suse
Wireshark