PT-2018-2715
CVE-2019-5717
·
Published
2018-04-03
·
Updated
2024-06-15
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.4.0 through 2.4.11
Wireshark versions 2.6.0 through 2.6.5
Description
The issue is related to a crash in the P MUL dissector, which can be caused by an invalid sequence number of zero. This could potentially allow a remote attacker to cause a denial of service.
Recommendations
For Wireshark versions 2.4.0 through 2.4.11, update to a version where the P MUL dissector is fixed to reject the invalid sequence number of zero.
For Wireshark versions 2.6.0 through 2.6.5, update to a version where the P MUL dissector is fixed to reject the invalid sequence number of zero.
Found an issue in the description? Have something to add? Feel free to write us 👾