| Package | Affected versions | Patched versions |
|---|---|---|
| wireshark | ≤ 2.6.2 |
In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free