PT-2018-13392
CVE-2018-16056
·
Published
2018-04-03
·
Updated
2024-06-15
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.2.0 through 2.2.16
Wireshark versions 2.4.0 through 2.4.8
Wireshark versions 2.6.0 through 2.6.2
Description
The Bluetooth Attribute Protocol dissector could crash due to the lack of verification that a dissector for a specific UUID exists. This issue was addressed by adding a verification in the epan/dissectors/packet-btatt.c file.
Recommendations
For Wireshark versions 2.2.0 through 2.2.16, update to a version where the dissector verification has been implemented.
For Wireshark versions 2.4.0 through 2.4.8, update to a version where the dissector verification has been implemented.
For Wireshark versions 2.6.0 through 2.6.2, update to a version where the dissector verification has been implemented.
Found an issue in the description? Have something to add? Feel free to write us 👾