Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-10896

Опубликовано: 09 апр. 2019
Источник: debian

Описание

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
wiresharkfixed2.6.8-1package
wiresharknot-affectedjessiepackage

Примечания

  • https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617

  • https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=441b6d9071d6341e58dfe10719375489c5b8e3f0

  • https://www.wireshark.org/security/wnpa-sec-2019-15.html

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 7 лет назад

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

CVSS3: 6.5
redhat
почти 7 лет назад

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

CVSS3: 7.5
nvd
почти 7 лет назад

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

CVSS3: 7.5
github
больше 3 лет назад

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.

CVSS3: 7.5
fstec
почти 7 лет назад

Уязвимость компонента DOF Dissector анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании