Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-1958

Высокий

ALT-PU-2017-1958: package wireshark update to version 2.4.0-alt1.S1

Источник
errata.altlinux.org
Дата публикации
31.07.2017
Дата обновления
31.07.2017
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades wireshark to version 2.4.0-alt1.S1.

Устраненные уязвимости2

Ссылки1

ALT-PU-2017-1958https://errata.altlinux.org/ALT-PU-2017-1958

Связанные уязвимости

ubuntu логотип

CVE-2017-17935

CVSS3: 7.5
ubuntu
почти 9 лет назад

The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.

redhat логотип

CVE-2017-17935

CVSS3: 4.3
redhat
почти 9 лет назад

The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.

nvd логотип

CVE-2017-17935

CVSS3: 7.5
nvd
почти 9 лет назад

The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.

debian логотип

CVE-2017-17935

CVSS3: 7.5
debian
почти 9 лет назад

The File_read_line function in epan/wslua/wslua_file.c in Wireshark th ...

ubuntu логотип

CVE-2017-17997

CVSS3: 7.5
ubuntu
почти 9 лет назад

In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343.