Wind River Support Network

HomeDefectsLIN8-10735

Fixed

LIN8-10735 : Security Advisory - wireshark - CVE-2019-10903

Created: Apr 9, 2019 Updated: May 15, 2019

Resolved Date: Apr 19, 2019

Found In Version: unknown

Fix Version: 8.0.0.30

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-10903 User=admin}

CVEs

CVE-2019-10903