Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-11355

Опубликовано: 22 мая 2018
Источник: debian
EPSS Низкий

Описание

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
wiresharknot-affectedpackage

Примечания

  • https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14673

  • Introduced by: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a584eab239d55e441433ead40c993e08a24c59fe (v2.5.0)

  • Fixed by: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=99d27a5fd2c540f837154aca3b3647f5ccfa0c33 (v2.6.1)

  • https://www.wireshark.org/security/wnpa-sec-2018-27.html

EPSS

Процентиль: 68%
0.00583
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 7 лет назад

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.

CVSS3: 5.9
redhat
больше 7 лет назад

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.

CVSS3: 7.5
nvd
больше 7 лет назад

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.

CVSS3: 7.5
github
больше 3 лет назад

In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.

suse-cvrf
больше 7 лет назад

Security update for wireshark

EPSS

Процентиль: 68%
0.00583
Низкий