OSV-2022-770

    Dashboard / Vulnerabilities / OSV-2022-770

    OSV-2022-770

    Published: 22 Aug 2022Last Modified: 22 Aug 2022

    Summary: Stack-buffer-overflow in get_transaction

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50477 ``` Crash type: Stack-buffer-overflow READ 2 Crash state: get_transaction dissect_asp call_dissector_work_error ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50477

    Affected packages

    Package

    Name: wireshark

    Purl: pkg:generic/wireshark

    Affected ranges

    Type: GIT

    Events:

    Introduced- b093b6a9928d296f6d7a610ddd22650b4043b6c6
    Fixed -eb83e055b855d23802a25d5de6e3c8682f38fb9d

    Affected versions

    v3.7.2
    v3.7.3rc0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-770 | CVE-DB