PT-2018-13392
CVE-2018-16056
·
Publicado
2018-04-03
·
Atualizado
2024-06-15
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.2.0 through 2.2.16
Wireshark versions 2.4.0 through 2.4.8
Wireshark versions 2.6.0 through 2.6.2
Description
The Bluetooth Attribute Protocol dissector could crash due to the lack of verification that a dissector for a specific UUID exists. This issue was addressed by adding a verification in the epan/dissectors/packet-btatt.c file.
Recommendations
For Wireshark versions 2.2.0 through 2.2.16, update to a version where the dissector verification has been implemented.
For Wireshark versions 2.4.0 through 2.4.8, update to a version where the dissector verification has been implemented.
For Wireshark versions 2.6.0 through 2.6.2, update to a version where the dissector verification has been implemented.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾