Описание
RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4
A flaw was found in Wireshark, a network protocol analyzer. By processing a specially crafted Real-Time Streaming Protocol (RTSP) packet, a remote attacker could cause the Wireshark application to crash, leading to a denial of service. This vulnerability affects the RTSP protocol dissector.
Меры по смягчению последствий
Users can reduce exposure by avoiding the analysis of untrusted network capture files or live network traffic from untrusted sources. To specifically prevent the vulnerable RTSP dissector from processing packets, it can be disabled within Wireshark's preferences. Navigate to 'Analyze' -> 'Enabled Protocols...' and uncheck the 'RTSP' protocol. Disabling this protocol may impact the ability to analyze legitimate RTSP traffic.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 6 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 7 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 8 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 9 | wireshark | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4
RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4
RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4
Уязвимость анализатора протокола RTSP анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6.5 Medium
CVSS3