Wind River Support Network

HomeDefectsLIN9-8326

Fixed

LIN9-8326 : Security Advisory - wireshark - CVE-2019-10899

Created: Apr 9, 2019 Updated: Jun 12, 2019

Resolved Date: May 24, 2019

Found In Version: unknown

Fix Version: 9.0.0.21

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-10899 User=admin}

CVEs

CVE-2019-10899