CVE-2019-10897

CVE-2019-10897

Name

CVE-2019-10897

Description

In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Release Notes	https://www.wireshark.org/security/wnpa-sec-2019-11.html
Vendor Advisory	https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d
Exploit	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553
Third Party Advisory	http://www.securityfocus.com/bid/107836
Mailing List	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/
Mailing List	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/
SUSE	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html

Type

URI

Release Notes

https://www.wireshark.org/security/wnpa-sec-2019-11.html

Vendor Advisory

https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d

Exploit

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553

Third Party Advisory

http://www.securityfocus.com/bid/107836

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/