Wireshark 缓冲区错误漏洞

漏洞信息详情

Wireshark 缓冲区错误漏洞

CNNVD编号：CNNVD-201907-1014
危害等级：高危-->
危害等级：高危
CVE编号： CVE-2019-13619
漏洞类型：缓冲区错误
发布时间： 2019-07-17
威胁类型：远程
更新时间： 2021-02-09
厂商：
漏洞来源： Gerald Combs

漏洞简介

Wireshark（前称Ethereal）是Wireshark团队的一套网络数据包分析软件。该软件的功能是截取网络数据包，并显示出详细的数据以供分析。

Wireshark 3.0.0版本至3.0.2版本、2.6.0版本至2.6.9版本和2.4.0版本至2.4.15版本中存在安全漏洞。攻击者可利用该漏洞造成ASN.1 BER解析器及相关解析器崩溃，造成拒绝服务。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.wireshark.org/security/wnpa-sec-2019-20.html

参考网址

来源:MISC

链接:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=7e90aed666e809c0db5de9d1816802a7dcea28d9

来源:MISC

链接:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870

来源:BID

链接:https://www.securityfocus.com/bid/109293

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/JY52XAC2UNC4X4ZPIXYMK5SVXV2PO5I3/

来源:www.wireshark.org

链接:https://www.wireshark.org/security/wnpa-sec-2019-20.html

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2019-13619

来源:bugzilla.redhat.com

链接:https://bugzilla.redhat.com/show_bug.cgi?id=1731022

来源:www.wireshark.org

链接:http://www.wireshark.org/

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00068.html

来源:UBUNTU

链接:https://usn.ubuntu.com/4133-1/

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/Q4QVJALLGVVC7MBUT4B4SHQVDXGJKGI7/

来源:usn.ubuntu.com

链接:https://usn.ubuntu.com/4133-1/

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192104-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192103-1.html

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Wireshark-denial-of-service-via-ASN-1-BER-29814

来源:www.securityfocus.com

链接:https://www.securityfocus.com/bid/109293

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3063/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3517/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0926/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0424

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/153684/Wireshark-Analyzer-3.0.3.html

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-13619

受影响实体

暂无

补丁

Wireshark 缓冲区错误漏洞的修复措施

正文

Wireshark 缓冲区错误漏洞

漏洞信息详情