Red Hat Security AdvisoryRHSA-2008:0058
wireshark security update
Released 2008-01-21 · Red Hat rating Moderate · View on Red Hat →
Fixes 16 records
Priority MEDIUM 52
Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote attackers to cause a denial of service and possibly execute arbitrary cod…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06212 · Published 2007-11-23 · Fixed CWE-119
Priority MEDIUM 52
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSerie…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06212 · Published 2007-11-23 · Fixed CWE-119
Priority MEDIUM 52
Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06212 · Published 2007-11-23 · Fixed CWE-119
Priority MEDIUM 40
The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03285 · Published 2007-11-23 · Fixed
Priority LOW 38
The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02268 · Published 2007-11-23 · Fixed
Priority LOW 35
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.01931 · Published 2007-11-23 · Fixed
Priority LOW 30
Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) USB dissector, which can trigger resource consumption or a crash.
CVSS 2.0MEDIUM 6.1· Adjacent network · No auth · Interaction — · EPSS 0.01295 · Published 2007-12-19 · Fixed CWE-399
Priority LOW 30
Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.06956 · Published 2007-11-23 · Fixed CWE-189
Priority LOW 29
Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked mes…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03396 · Published 2007-11-23 · Fixed
Priority LOW 28
The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02928 · Published 2007-12-19 · Fixed
Priority LOW 28
The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02902 · Published 2007-11-23 · Fixed
Priority LOW 27
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2007-12-19 · Fixed CWE-119
Priority LOW 27
Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2007-11-23 · Fixed CWE-20
Priority LOW 27
The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2007-11-23 · Fixed CWE-119
Priority LOW 23
Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts o…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01705 · Published 2007-12-19 · Fixed CWE-399
Priority LOW 18
The WiMAX dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors related to "unaligned access on some platforms."
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.01001 · Published 2007-12-19 · Fixed CWE-264