Описание
Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
A flaw was found in Wireshark. The Catapult DCT2000 protocol dissector is susceptible to a crash that results in a Denial of Service (DoS). An attacker could exploit this flaw by injecting malformed network packets or by tricking a user into opening a specially crafted capture file, causing the application to terminate unexpectedly.
Меры по смягчению последствий
Avoid processing packet capture files obtained from untrusted sources and avoid live packet capturing on untrusted networks. Alternatively, disable the Catapult DCT2000 protocol dissector if it is not required:
- In the Wireshark GUI, open Analyze -> Enabled Protocols, search for "Catapult DCT2000" (or "dct2000"), uncheck the checkbox, and click OK.
- For command-line analysis using TShark, supply the command-line flag: tshark --disable-protocol dct2000 Caveat: Disabling the dissector prevents Wireshark and TShark from decoding Catapult DCT2000 network traffic, rendering it as raw payload data.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 6 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 7 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 8 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 9 | wireshark | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 ...
Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Уязвимость файлового парсера Catapult DCT2000 анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызывать отказ в обслуживании
EPSS
5.5 Medium
CVSS3