Skip to content

GDSDB (Firebird SQL Database Remote Protocol) dissector - inf loop - denial of service

Summary

An infinite loop condition exists in the GDSDB dissector due to missing check (offset <= 0) - poc_gdsdb_missing_check

Please see attached pcap - poc_gdsdb_missing_check.pcap

Build information

TShark (Wireshark) 3.7.0 (v3.7.0rc0-844-g14a1dfbe1083)
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information