Wind River Support Network

HomeDefectsLIN9-8322

Fixed

LIN9-8322 : Security Advisory - wireshark - CVE-2019-10903

Created: Apr 9, 2019 Updated: Jun 12, 2019

Resolved Date: May 24, 2019

Found In Version: unknown

Fix Version: 9.0.0.21

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-10903 User=admin}

CVEs

CVE-2019-10903