Aisle Research

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** An abnormal exit in the BUSMASTER file parser allows a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A NULL pointer dereference in the Bluetooth BR/EDR FHS protocol dissector can lead to a crash, resulting in a denial of service. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a version newer than 4.6.7. Update Wireshark versions 4.4.0 through 4.4.18 to a version newer than 4.4.18.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A crash in the RRC protocol dissector can lead to a denial of service. A dissector is a software component that breaks down network traffic into a human-readable format. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to version 4.6.8. Update Wireshark versions 4.4.0 through 4.4.18 to version 4.4.19.

**Name of the Vulnerable Software and Affected Versions** Ixia IxVeriWave and Vector Informatik BLF file parser versions 4.6.0 through 4.6.7 **Description** A crash in the BLF file parser on Windows allows a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A crash in the Pcapng file parser allows for a denial of service. This occurs due to an out-of-bounds read, which happens when the software attempts to read data outside the intended memory boundary of the buffer. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a version newer than 4.6.7. Update Wireshark versions 4.4.0 through 4.4.18 to a version newer than 4.4.18.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A NULL pointer dereference in the CMS protocol dissector can lead to a crash, resulting in a denial of service. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a newer version. Update Wireshark versions 4.4.0 through 4.4.18 to a newer version.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A crash in the ESS protocol dissector occurs due to the use of an uninitialized variable, which can lead to a denial of service. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a version newer than 4.6.7. Update Wireshark versions 4.4.0 through 4.4.18 to a version newer than 4.4.18.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A crash in the 3gpp phone log file parser allows for a denial of service. This is caused by an out-of-bounds write, which occurs when the software writes data past the end of the intended buffer, potentially corrupting memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A Use After Free issue in the CMS protocol dissector can lead to a crash, resulting in a denial of service. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a newer version. Update Wireshark versions 4.4.0 through 4.4.18 to a newer version.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A crash in the Bluetooth HFP Profile protocol dissector allows for a denial of service. This is caused by an out-of-bounds read, which occurs when the software attempts to read data outside the intended memory boundary. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a newer version. Update Wireshark versions 4.4.0 through 4.4.18 to a newer version.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A crash in the Kerberos protocol dissector allows for a denial of service. This is caused by an out-of-bounds read, which occurs when the software attempts to read data outside the intended memory boundary of a buffer. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a version newer than 4.6.7. Update Wireshark versions 4.4.0 through 4.4.18 to a version newer than 4.4.18.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A NULL pointer dereference in the H.245 protocol dissector can lead to a crash, resulting in a denial of service. A protocol dissector is a software component that breaks down network traffic into a human-readable format. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a version newer than 4.6.7. Update Wireshark versions 4.4.0 through 4.4.18 to a version newer than 4.4.18.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A crash in the C12.22 protocol dissector allows a denial of service. A dissector is a software component that breaks down network traffic into a human-readable format. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to version 4.6.8. Update Wireshark versions 4.4.0 through 4.4.18 to version 4.4.19.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A NULL pointer dereference in the X.509IF protocol dissector can lead to a crash, resulting in a denial of service. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a version newer than 4.6.7. Update Wireshark versions 4.4.0 through 4.4.18 to a version newer than 4.4.18.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 **Description** A heap-based buffer overflow in the C12.22 protocol dissector can lead to a crash, resulting in a denial of service. A dissector is a software component that breaks down network packets into a human-readable format. **Recommendations** Update Wireshark versions 4.6.0 through 4.6.7 to a version newer than 4.6.7. Update Wireshark versions 4.4.0 through 4.4.18 to a version newer than 4.4.18.

**Name of the Vulnerable Software and Affected Versions** Gitea versions prior to 1.25.5 **Description** The software fails to correctly persist the OAuth2 PKCE S256 challenge method during the authorization process. This flaw allows for token exchange without the required verifier check. PKCE (Proof Key for Code Exchange) is a security extension for OAuth2 designed to prevent authorization code injection attacks. **Recommendations** Update Gitea to version 1.25.5 or later.

**Name of the Vulnerable Software and Affected Versions** Pacemaker (affected versions not specified) **Description** An integer overflow exists in the remote message decompression process. An unauthenticated remote attacker can exploit this by sending a specially crafted compressed remote message before authentication, causing memory corruption. This leads to a denial of service (DoS) in the CIB remote listener, resulting in the affected service crashing. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Poppler (affected versions not specified) **Description** A flaw in the Splash backend allows a remote attacker to trigger an integer overflow in the `tilingPatternFill()` function by using a specially crafted PDF file. This overflow causes an undersized heap memory allocation, which enables an out-of-bounds write. This can lead to arbitrary code execution, information disclosure, or denial of service within the application processing the PDF. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libsolv-demo versions prior to 0.7.38-1.1 **Description** Security issues were identified in the libsolv-demo package. **Recommendations** Update to version 0.7.38-1.1.

**Name of the Vulnerable Software and Affected Versions** undici versions prior to 7.24.0 **Description** The undici WebSocket client is susceptible to a denial-of-service attack because of insufficient validation of the `server max window bits` parameter within the permessage-deflate extension. When a WebSocket client establishes a connection with a server, it automatically signals support for permessage-deflate compression. A malicious server can respond with a `server max window bits` value that is outside the valid range for zlib (8-15). Subsequently, when the server transmits a compressed frame, the client attempts to instantiate a zlib InflateRaw object using this invalid `windowBits` value, leading to a synchronous RangeError that is not handled, ultimately causing the Node.js process to terminate. The issue arises because the `isValidClientWindowBits()` function only verifies that the value consists of ASCII digits, without ensuring it falls within the acceptable range. Additionally, the call to `createInflateRaw()` is not enclosed in a try-catch block, and the resulting exception propagates through the call stack, crashing the process. **Recommendations** Update to undici version 7.24.0 or later.