Описание
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Релиз | Статус | Примечание |
---|---|---|
artful | not-affected | |
bionic | released | 2.6.3-1~ubuntu18.04.1 |
devel | not-affected | 2.6.3-1 |
esm-apps/bionic | released | 2.6.3-1~ubuntu18.04.1 |
esm-apps/xenial | released | 2.6.3-1~ubuntu16.04.1 |
esm-infra-legacy/trusty | not-affected | 2.6.3-1~ubuntu14.04.1 |
precise | ignored | end of life |
precise/esm | DNE | precise was needed |
trusty | released | 2.6.3-1~ubuntu14.04.1 |
trusty/esm | not-affected | 2.6.3-1~ubuntu14.04.1 |
Показывать по
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
The dissect_wccp2r1_address_table_info function in epan/dissectors/pac ...
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
EPSS
4.3 Medium
CVSS2