Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-14368

Опубликовано: 18 июл. 2018
Источник: redhat
CVSS3: 5.9
EPSS Низкий

Описание

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6wiresharkWill not fix
Red Hat Enterprise Linux 8wiresharkNot affected
Red Hat Enterprise Linux 7wiresharkFixedRHSA-2020:104731.03.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-835
https://bugzilla.redhat.com/show_bug.cgi?id=1607327wireshark: Bazaar dissector infinite loop (wnpa-sec-2018-40)

EPSS

Процентиль: 80%
0.01346
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 7 лет назад

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

CVSS3: 7.5
nvd
больше 7 лет назад

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

CVSS3: 7.5
debian
больше 7 лет назад

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ...

CVSS3: 7.5
github
больше 3 лет назад

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

oracle-oval
почти 6 лет назад

ELSA-2020-1047: wireshark security and bug fix update (MODERATE)

EPSS

Процентиль: 80%
0.01346
Низкий

5.9 Medium

CVSS3