Описание
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wireshark | fixed | 4.0.7-1 | package | |
| wireshark | not-affected | buster | package |
Примечания
https://www.wireshark.org/security/wnpa-sec-2023-21.html
https://gitlab.com/wireshark/wireshark/-/issues/19105
Introduced by: https://gitlab.com/wireshark/wireshark/-/commit/f8d308e9affefea9cca4bd5f2672f4c09688d4e0 (master)
Introduced by: https://gitlab.com/wireshark/wireshark/-/commit/b6c69cc5a996a665b3b86112ff38ff026e4c3994 (backport to 4.0.2)
Introduced by: https://gitlab.com/wireshark/wireshark/-/commit/e0bd9d312c362318fd19e41c6c0e23fc81d42253 (backport to 3.6.10)
Связанные уязвимости
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
Уязвимость анализатора трафика компьютерных сетей Wireshark , связанная с несогласованным управлением памятью, , позволяющая нарушителю вызвать отказ в обслуживании
