CVE-2023-0668
Wireshark IEEE-C37.118 parsing buffer overflow
Résumé
Wireshark IEEE-C37.118 parsing buffer overflow
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-0668 wireshark Corrigé dans: 3.4.16-0+deb11u1
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory takeonme.org
- advisory debian.org
- advisory wireshark.org
- advisory wireshark.org
- report gitlab.com
- web lists.debian.org