Wireshark CVE-2024-8250 Stack-buffer-overflow in header_equal Fix

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Vulnerability Description: - Vulnerability ID: Fuzz 70582 - Vulnerability Type: Stack-buffer-overflow in header_equal - Description: A stack buffer overflow exists in the header_equal function. 2. Vulnerability Location: - Source Code Path: /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_wireshark_9de6374568df6e9a97b9288a3fce517c93d2636/revis - Specific Function: header_equal - Specific Location: /epan/dissectors/packet-ntlmssp.c:2890:8 3. Vulnerability Trigger Condition: - Trigger Condition: Stack buffer overflow occurs in the header_equal function. 4. Vulnerability Fix: - Fix Status: Fixed, with fix IDs 16641, 16640, 16638. 5. Vulnerability Impact: - Impact: Stack buffer overflow, potentially leading to heap overflow. 6. Vulnerability Reproduction: - Reproduction Method: Can be reproduced using the fuzzshark tool. - Reproduction ID: clusterfuzz-testcase-minimized-fuzzshark_udp_port-dns-4772791992254464. 7. Vulnerability Status: - Status: Fixed, with fix IDs 16641, 16640, 16638. 8. Vulnerability Report: - Report Time: 1 month ago - Reporter: Gerald Combs 9. Vulnerability ID: - CVE ID: CVE-2024-8250 This information helps us understand the vulnerability in detail, including its scope of impact, trigger conditions, and remediation status.

Goal Reached Thanks to every supporter — we hit 100%!

Wireshark CVE-2024-8250 Stack-buffer-overflow in header_equal Fix