Описание
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wireshark | fixed | 4.0.5-1~exp1 | experimental | package |
| wireshark | fixed | 4.0.6-1 | package |
Примечания
https://gitlab.com/wireshark/wireshark/-/issues/18947
https://www.wireshark.org/security/wnpa-sec-2023-11.html
EPSS
Связанные уязвимости
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
Уязвимость анализатора трафика компьютерных сетей Wireshark, связанная c неправильной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании
EPSS