Описание
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wireshark | fixed | 4.4.1-1 | package | |
| wireshark | not-affected | bookworm | package | |
| wireshark | not-affected | bullseye | package |
Примечания
https://www.wireshark.org/security/wnpa-sec-2024-12.html
https://gitlab.com/wireshark/wireshark/-/issues/20026
Issue introduced in: https://gitlab.com/wireshark/wireshark/-/commit/06faabf9cc9c954e5a3044278d5b14b1e934ac61
Fixed by: https://gitlab.com/wireshark/wireshark/-/commit/733544bb661594cc64058fb3b7950934275b7690 (v4.41)
EPSS
Связанные уязвимости
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
Уязвимость компонента ITS Dissector анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызывать отказ в обслуживании
EPSS