CVE-2018-11361

Опубликовано: 12 мая 2018

Источник: redhat

CVSS3: 5.9

Описание

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 5	wireshark	Not affected
Red Hat Enterprise Linux 6	wireshark	Not affected
Red Hat Enterprise Linux 7	wireshark	Not affected
Red Hat Enterprise Linux 8	wireshark	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-122

https://bugzilla.redhat.com/show_bug.cgi?id=1581782wireshark: Heap-based Buffer Overflow in dot11decrypt.c

5.9 Medium

CVSS3

Связанные уязвимости

CVE-2018-11361

CVSS3: 7.5

ubuntu

больше 7 лет назад

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.

CVE-2018-11361

CVSS3: 7.5

nvd

больше 7 лет назад

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.

CVE-2018-11361

CVSS3: 7.5

debian

больше 7 лет назад

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. Th ...

GHSA-cv22-j8v9-r859

CVSS3: 7.5

github

больше 3 лет назад

In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.

SUSE-SU-2018:2412-1

suse-cvrf

больше 7 лет назад

Security update for wireshark

5.9 Medium

CVSS3