Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-6836

Опубликовано: 08 фев. 2018
Источник: debian
EPSS Низкий

Описание

The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
wiresharknot-affectedpackage

Примечания

  • https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397

  • Introduced by: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=52823805b29a44a83eacd0e5b415b11227ec313b

  • Fixed by: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef

EPSS

Процентиль: 86%
0.02721
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 9 лет назад

The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 3.3
redhat
почти 9 лет назад

The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 9.8
nvd
почти 9 лет назад

The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 9.8
github
больше 4 лет назад

The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 9.8
altlinux
больше 8 лет назад

ALT-PU-2018-1290: package `wireshark` update to version 2.4.5-alt1.S1

EPSS

Процентиль: 86%
0.02721
Низкий