PT-2012-3367 · Wireshark+3 · Wireshark+3

·

CVE-2012-1595

·

Publicado

2012-04-11

·

Atualizado

2023-02-13

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.11 Wireshark versions 1.6.x through 1.6.5
Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by providing a WTAP ENCAP ERF file that contains an Extension or Multi-Channel header with an invalid pseudoheader size. The problem is related to the pcap and pcap-ng file parsers.
Recommendations For Wireshark versions 1.4.x through 1.4.11, update to version 1.4.12 or later. For Wireshark versions 1.6.x through 1.6.5, update to version 1.6.6 or later.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CESA-2012_0509
CVE-2012-1595
RHSA-2012:0509
RHSA-2012_0509

Produtos afetados

Centos
Red Hat
Suse
Wireshark