Описание
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
A heap-buffer-overflow vulnerability was found in Wireshark. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt or crash.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 7 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 8 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 9 | wireshark | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=2039027wireshark: pcapng file parser crash
EPSS
Процентиль: 40%
0.00184
Низкий
5.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.5
ubuntu
около 4 лет назад
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
CVSS3: 5.5
nvd
около 4 лет назад
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
CVSS3: 5.5
debian
около 4 лет назад
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of se ...
CVSS3: 5.5
github
около 4 лет назад
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
EPSS
Процентиль: 40%
0.00184
Низкий
5.5 Medium
CVSS3