Описание
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
A flaw was found in the HTTP3 dissector of Wireshark. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
Отчет
Red Hat Enterprise Linux 6, 7, 8 and 9 are not affected by this CVE as they shipped an older version of Wireshark that did not include the vulnerable code.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 7 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 8 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 9 | wireshark | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via ...
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
EPSS
5.5 Medium
CVSS3