vendor:
Wireshark
by:
Anonymous
7.5
CVSS
HIGH
Stack-Based Out-of-Bounds Memory Access
787
CWE
Product Name: Wireshark
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: N/A
2020
Stack-Based Out-of-Bounds Memory Access in Wireshark
The vulnerability is a stack-based out-of-bounds memory access in Wireshark. It can be triggered by feeding a malformed file to tshark. Three files are attached which trigger the crash.
Mitigation:
The user should update to the latest version of Wireshark to mitigate the vulnerability.