CVE-2019-10902

Опубликовано: 09 апр. 2019

Источник: debian

EPSS Низкий

Описание

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.

Пакет	Статус	Версия исправления	Релиз	Тип
wireshark	not-affected			package

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=95571f17d5e2de39735e62e5251583f930c06d51
https://www.wireshark.org/security/wnpa-sec-2019-16.html
bug was never in Debian apart experimental released versions:
Dissector introduced in 3.0.0 and CVE fixed in 3.0.1

EPSS

Процентиль: 70%

0.00637

Низкий

CVE-2019-10902

CVSS3: 7.5

ubuntu

почти 7 лет назад

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.

CVE-2019-10902

CVSS3: 6.5

redhat

почти 7 лет назад

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.

CVE-2019-10902

CVSS3: 7.5

nvd

почти 7 лет назад

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.

GHSA-grp6-r7rq-fpc3

CVSS3: 7.5

github

больше 3 лет назад

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.

BDU:2020-02716

CVSS3: 7.5

fstec

больше 6 лет назад

Уязвимость диссектора TSDNS анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 70%

0.00637

Низкий