Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-0207

Опубликовано: 03 янв. 2024
Источник: debian

Описание

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

Пакеты

ПакетСтатусВерсия исправленияРелизТип
wiresharkfixed4.2.2-1package
wiresharknot-affectedbookwormpackage
wiresharknot-affectedbullseyepackage
wiresharknot-affectedbusterpackage

Примечания

  • https://www.wireshark.org/security/wnpa-sec-2024-03.html

  • https://gitlab.com/wireshark/wireshark/-/issues/19502

  • Introduced by: https://gitlab.com/wireshark/wireshark/-/commit/80f9a28921acfa1fb9fe29a25468451faad2b6f2 (v4.2.0rc0)

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 2 лет назад

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS3: 5.5
redhat
больше 2 лет назад

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS3: 7.8
nvd
больше 2 лет назад

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS3: 7.8
github
больше 2 лет назад

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

suse-cvrf
почти 2 года назад

Security update for wireshark