Описание
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service
A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the TLS protocol dissector, which can lead to an infinite loop. This issue, triggered by processing a specially crafted TLS packet, results in a denial of service (DoS) condition, making the application unresponsive.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 6 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 7 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 8 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 9 | wireshark | Fix deferred |
Показывать по
Дополнительная информация
Статус:
6.5 Medium
CVSS3
Связанные уязвимости
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allow ...
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service
Уязвимость анализатора протокола TLS анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
6.5 Medium
CVSS3