CVE-2018-14438 | BDVDB-2026-104913 Detail

Description#

In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/104876
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14921

Exploit#

No public exploit known

History#

Version 12018-07-20Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.