漏洞信息详情
Wireshark 缓冲区错误漏洞
漏洞简介
Wireshark 2.4.0版本至2.4.12版本和2.6.0版本至2.6.6版本中的ASN.1 BER及相关解析器存在缓冲区错误漏洞。攻击者可利用该漏洞造成解析器崩溃。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://www.wireshark.org/security/wnpa-sec-2019-06.html
参考网址
来源:MISC
链接:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f8fbe9f934d65b2694fa74622e5eb2e1dc8cd20b
来源:DEBIAN
链接:https://www.debian.org/security/2019/dsa-4416
来源:www.wireshark.org
链接:https://www.wireshark.org/security/wnpa-sec-2019-08.html
来源:www.wireshark.org
链接:https://www.wireshark.org/security/wnpa-sec-2019-07.html
来源:www.wireshark.org
链接:https://www.wireshark.org/security/wnpa-sec-2019-06.html
来源:code.wireshark.org
链接:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c557bb0910be271e49563756411a690a1bc53ce5
来源:www.oracle.com
链接:https://www.oracle.com/technetwork/topics/security/bulletinapr2019-5462008.html
来源:access.redhat.com
链接:https://access.redhat.com/security/cve/cve-2019-9214
来源:bugzilla.redhat.com
链接:https://bugzilla.redhat.com/show_bug.cgi?id=1684115
来源:bugs.wireshark.org
链接:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15536
来源:bugs.wireshark.org
链接:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464
来源:bugs.wireshark.org
链接:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15447
来源:www.wireshark.org
链接:http://www.wireshark.org/
来源:code.wireshark.org
链接:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html
来源:BID
链接:https://www.securityfocus.com/bid/107203
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html
来源:BUGTRAQ
链接:https://seclists.org/bugtraq/2019/Mar/35
来源:BID
链接:http://www.securityfocus.com/bid/107203
来源:UBUNTU
链接:https://usn.ubuntu.com/3986-1/
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20190688-1.html
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/3986-1/
来源:lists.debian.org
链接:https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20190619-1.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/77262
来源:www.securityfocus.com
链接:http://www.securityfocus.com/bid/107203
来源:www.nsfocus.net
链接:http://www.nsfocus.net/vulndb/42844
来源:www.securityfocus.com
链接:https://www.securityfocus.com/bid/107203
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.0926/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/77646
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/152205/Debian-Security-Advisory-4416-1.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/77758
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Wireshark-three-vulnerabilities-28619
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-9209
受影响实体
暂无
补丁
- Wireshark ASN.1 BER及相关解析器缓冲区错误漏洞的修复措施<!--2019-2-27-->
还没有评论,来说两句吧...