Описание
BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
A flaw was found in Wireshark. A remote attacker could exploit a crash in the BEEP (Blocks Extensible Exchange Protocol) dissector by crafting a malicious BEEP packet. This vulnerability leads to a Denial of Service (DoS), causing Wireshark to become unresponsive.
Меры по смягчению последствий
To mitigate this issue, disable the BEEP protocol dissector in Wireshark. This prevents the application from processing BEEP packets, thereby avoiding the vulnerability. This action can be performed within Wireshark's protocol preferences. Disabling the BEEP dissector will prevent analysis of BEEP protocol traffic.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 6 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 7 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 8 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 9 | wireshark | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to ...
BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
Уязвимость функции dissect_beep_tree() диссектора протокола BEEP анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызывать отказ в обслуживании
EPSS
6.5 Medium
CVSS3