Описание
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
A flaw in Wireshark's C12.22 protocol dissector allows remote attackers to trigger a Denial of Service (DoS). By sending a specially crafted network packet or capture file, an attacker can crash the application, disrupting network analysis capabilities.
Отчет
A denial of service flaw in Wireshark's C12.22 protocol dissector allows a remote attacker to crash the application via a crafted network packet, disrupting network analysis operations without requiring user interaction or privileges. RHEL 9 and older versions are not affected.
Меры по смягчению последствий
Avoid analyzing capture files or live traffic from untrusted sources. If ANSI C12.22 parsing is not required, disable the dissector by unchecking C1222 under Analyze > Enabled Protocols in Wireshark, or by executing tshark with the -d c1222,0 flag.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 7 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 8 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 9 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 10 | wireshark | Fixed | RHSA-2026:84721 | 19.10.2026 |
| Red Hat Enterprise Linux 10 | wireshark | Fixed | RHSA-2026:98089 | 11.11.2026 |
Показывать по
Дополнительная информация
Статус:
6.5 Medium
CVSS3
Связанные уязвимости
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 ...
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Уязвимость функции decrypt_packet() анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
6.5 Medium
CVSS3