Red Hat Security AdvisoryRHSA-2007:0710
wireshark security update
Released 2007-11-07 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) wireshark-0.99.6-1.el5, wireshark-0.99.6-1.el5.i386, wireshark-0.99.6-1.el5.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) wireshark-0.99.6-1.el5, wireshark-0.99.6-1.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) wireshark-0.99.6-1.el5, wireshark-gnome-0.99.6-1.el5, wireshark-gnome-0.99.6-1.el5.i386
Fixes 5 records
Priority LOW 39
Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.16258 · Published 2007-06-26 · Fixed CWE-20
Priority LOW 38
Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02255 · Published 2007-06-26 · Fixed CWE-20
Priority LOW 28
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02911 · Published 2007-06-26 · Fixed
Priority LOW 27
Off-by-one error in the DHCP/BOOTP dissector in Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via crafted DHCP-over-DOCSIS packets.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01992 · Published 2007-06-26 · Fixed
Priority LOW 27
Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service (crash) via crafted iSeries capture files that trigger a SIGTRAP.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01992 · Published 2007-06-26 · Fixed
THREATIST.IORead the docs