Описание
Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wireshark | fixed | 4.4.4-1 | package | |
| wireshark | fixed | 4.0.17-0+deb12u2 | bookworm | package |
| wireshark | not-affected | bullseye | package |
Примечания
https://www.wireshark.org/security/wnpa-sec-2025-01.html
https://gitlab.com/wireshark/wireshark/-/issues/20373
CBOR Object Signing and Encryption (COSE) dissector introduced in 3.6.0rc0
Связанные уязвимости
Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
