CVE-2014-2282 in Wireshark

Resumen (Inglés)

The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted SS7 MTP3 packet.

Reservar

2014-03-05

Divulgación

2014-03-11

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
12576	Wireshark M3UA Dissector packet-m3ua.c dissect_protocol_data_parameter desbordamiento de búfer	119	No probado	Arreglo oficial	CVE-2014-2282