Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff, related to a "buffer exception handling vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade wireshark | Jul 30, 2024 | Sep 20, 2011 |
| Gentoo Linux | — | Upgrade net-analyzer/wireshark. | Oct 30, 2017 | Sep 20, 2011 |
| Suse | — | Upgrade libwiretap7Upgrade libwsutil8Upgrade libwsutil16Upgrade libwireshark18Upgrade libwireshark19Upgrade libwiretap16Upgrade libwiretap15Upgrade libwsutil17Upgrade libwsutil7Upgrade libwiretap6Upgrade wiresharkUpgrade libwireshark9Upgrade wireshark-develUpgrade wireshark-ui-qtUpgrade libwscodecs1Upgrade wireshark-gtkUpgrade libwireshark8 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Sep 20, 2011 |
| Wireshark | — | Upgrade to Wireshark version 1.6.2 | Oct 4, 2017 | Sep 20, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub