epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | wireshark | < 2.2.0~rc1+g438c022-1 | wireshark_2.2.0~rc1+g438c022-1_all.deb |
Debian | 11 | all | wireshark | < 2.2.0~rc1+g438c022-1 | wireshark_2.2.0~rc1+g438c022-1_all.deb |
Debian | 10 | all | wireshark | < 2.2.0~rc1+g438c022-1 | wireshark_2.2.0~rc1+g438c022-1_all.deb |
Debian | 999 | all | wireshark | < 2.2.0~rc1+g438c022-1 | wireshark_2.2.0~rc1+g438c022-1_all.deb |
Debian | 13 | all | wireshark | < 2.2.0~rc1+g438c022-1 | wireshark_2.2.0~rc1+g438c022-1_all.deb |