PT-2018-18935
CVE-2018-9257
·
Publicado
2018-04-03
·
Atualizado
2024-06-15
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.4.0 through 2.4.5
Description
The issue arises in the CQL dissector, which could enter an infinite loop. This was resolved by adding a check for a nonzero number of columns in the dissector code.
Recommendations
For Wireshark versions 2.4.0 through 2.4.5, update to a version where the fix has been applied, specifically where the code in epan/dissectors/packet-cql.c has been modified to check for a nonzero number of columns.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾