VDB
CNVD-2024-39270
CNVD-2024-39270
PUBLISHED
CVSS 7.5 HIGH
Wireshark是一套网络数据包分析软件。 Wireshark ws_manuf_lookup_str()存在堆溢出漏洞,远程攻击者可利用该漏洞提交特殊的请求,可使应用程序崩溃,造成拒绝服务攻击。
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| wireshark | wireshark | 0 |
Timeline
- Feb 21, 2024 CVE Published
- Feb 21, 2024 PoC Published
- Feb 21, 2024 PoC Published
- Feb 22, 2024 PoC Published
References
- https://gitlab.com/wireshark/wireshark/-/issues/19344 url
- https://github.com/wireshark/wireshark/commit/108217f4bb1afb8b25fc705c2722b3e328b1ad78 url
- FEDORA-2024-4115ab9959 vendor-advisory
- https://gist.github.com/1047524396/369ba0ccffe255cf8142208b6142be2b url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZT2BX7UARZVVWKITSZMHW7BHXGIKRSR2/ url