Red Hat Security AdvisoryRHSA-2008:0059
wireshark security update
Released 2008-01-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libsmi-0.4.5-3.el3, libsmi-0.4.5-3.el3.i386, libsmi-devel-0.4.5-3.el3 +5
- Red Hat Enterprise Linux AS version 3 libsmi-0.4.5-3.el3, libsmi-0.4.5-3.el3.i386, libsmi-0.4.5-3.el3.ia64 +13
- Red Hat Enterprise Linux ES version 3 libsmi-0.4.5-3.el3, libsmi-0.4.5-3.el3.i386, libsmi-0.4.5-3.el3.ia64 +9
- Red Hat Enterprise Linux WS version 3 libsmi-0.4.5-3.el3, libsmi-0.4.5-3.el3.i386, libsmi-0.4.5-3.el3.ia64 +9
Fixes 14 records
Priority MEDIUM 52
Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote attackers to cause a denial of service and possibly execute arbitrary cod…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06212 · Published 2007-11-23 · Fixed CWE-119
Priority MEDIUM 52
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSerie…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06212 · Published 2007-11-23 · Fixed CWE-119
Priority LOW 39
Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.16258 · Published 2007-06-26 · Fixed CWE-20
Priority LOW 38
The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02268 · Published 2007-11-23 · Fixed
Priority LOW 38
Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02255 · Published 2007-06-26 · Fixed CWE-20
Priority LOW 30
Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.06956 · Published 2007-11-23 · Fixed CWE-189
Priority LOW 29
Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked mes…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03396 · Published 2007-11-23 · Fixed
Priority LOW 28
The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02928 · Published 2007-12-19 · Fixed
Priority LOW 28
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02911 · Published 2007-06-26 · Fixed
Priority LOW 27
Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2007-11-23 · Fixed CWE-20
Priority LOW 27
The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2007-11-23 · Fixed CWE-119
Priority LOW 27
Off-by-one error in the DHCP/BOOTP dissector in Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via crafted DHCP-over-DOCSIS packets.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01992 · Published 2007-06-26 · Fixed
Priority LOW 27
Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service (crash) via crafted iSeries capture files that trigger a SIGTRAP.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01992 · Published 2007-06-26 · Fixed
Priority LOW 23
Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts o…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01705 · Published 2007-12-19 · Fixed CWE-399