PT-2018-13392

CVE-2018-16056

·

Published

2018-04-03

·

Updated

2024-06-15

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.16 Wireshark versions 2.4.0 through 2.4.8 Wireshark versions 2.6.0 through 2.6.2
Description The Bluetooth Attribute Protocol dissector could crash due to the lack of verification that a dissector for a specific UUID exists. This issue was addressed by adding a verification in the epan/dissectors/packet-btatt.c file.
Recommendations For Wireshark versions 2.2.0 through 2.2.16, update to a version where the dissector verification has been implemented. For Wireshark versions 2.4.0 through 2.4.8, update to a version where the dissector verification has been implemented. For Wireshark versions 2.6.0 through 2.6.2, update to a version where the dissector verification has been implemented.
Exploitability
Fix
Vendors
Affected products
Related identifiers
ALT-PU-2018-1549
ALT-PU-2018-2268
ALT-PU-2018-2487
DSA-4315-1
MGASA-2018-0370
OPENSUSE-SU-2018_2587-1
OPENSUSE-SU-2018_2628-1
OPENSUSE-SU-2020:0362-1
OPENSUSE-SU-2020_0362-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2018:2872-1
SUSE-SU-2018_2872-1
SUSE-SU-2018:2889-1
SUSE-SU-2018_2889-1
SUSE-SU-2018:2891-1
SUSE-SU-2018:2891-2
SUSE-SU-2020:0693-1
Found an issue in the description? Have something to add? Feel free to write us 👾