Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-7178

Опубликовано: 09 сент. 2016
Источник: debian
EPSS Низкий

Описание

epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
wiresharkfixed2.2.0~rc1+g438c022-1package

Примечания

  • https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=315bba7c645b75af24215c6303d187b188610bba

  • https://www.wireshark.org/security/wnpa-sec-2016-53.html

  • https://code.wireshark.org/review/17094

  • Affected versions: 2.0.0 to 2.0.5

  • Fixed versions: 2.0.6

EPSS

Процентиль: 68%
0.00558
Низкий

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 9 лет назад

epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.

CVSS3: 5.9
redhat
больше 9 лет назад

epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.

CVSS3: 5.9
nvd
больше 9 лет назад

epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.

CVSS3: 5.9
github
больше 3 лет назад

epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.

suse-cvrf
почти 9 лет назад

Security update for wireshark

EPSS

Процентиль: 68%
0.00558
Низкий