Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m7h5-4hfx-r2mh

Опубликовано: 07 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

EPSS

Процентиль: 42%
0.00203
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-122
CWE-787

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

CVSS3: 6.5
redhat
больше 2 лет назад

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

CVSS3: 6.5
nvd
больше 2 лет назад

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

CVSS3: 6.5
msrc
больше 2 лет назад

Wireshark MSMMS parsing buffer overflow

CVSS3: 6.5
debian
больше 2 лет назад

Due to failure in validating the length provided by an attacker-crafte ...

EPSS

Процентиль: 42%
0.00203
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-122
CWE-787