Wireshark 1.0.1 Denial of Service Vulnerability

Bugtraq ID:	30181
Class:	Unknown
CVE:	CVE-2008-3145
Remote:	Yes
Local:	No
Published:	Jul 10 2008 12:00AM
Updated:	Apr 13 2015 09:21PM
Credit:	Wireshark
Vulnerable:	Wireshark Wireshark 1.0.1 Wireshark Wireshark 1.0 Wireshark Wireshark 0.99.8 Wireshark Wireshark 0.99.7 Wireshark Wireshark 0.99.6 Wireshark Wireshark 0.99.5 Wireshark Wireshark 0.99.4 Wireshark Wireshark 0.99.3 Wireshark Wireshark 0.99.2 Wireshark Wireshark 0.99.1 Wireshark Wireshark 0.99 Wireshark Wireshark 0.10.13 Wireshark Wireshark 0.10.4 Wireshark Wireshark 0.10 Wireshark Wireshark 0.9.10 Wireshark Wireshark 0.9.5 SuSE SUSE Linux Enterprise Server 9 SP3 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE SUSE Linux Enterprise SDK 10 SP1 SuSE SUSE Linux Enterprise SDK 10 SuSE Suse Linux Enterprise Desktop 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP1 SuSE Suse Linux Enterprise Desktop 10 SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO SuSE Linux Desktop 10 SuSE Linux 10.1 x86-64 SuSE Linux 10.1 x86 SuSE Linux 10.1 ppc SuSE Linux 10.0 x86-64 SuSE Linux 10.0 x86 SuSE Linux 10.0 ppc S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. SuSE Linux Open-Xchange 4.1 S.u.S.E. SUSE Linux Enterprise Server RT Solution 10 0 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. openSUSE 10.1 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Open-Enterprise-Server 1 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop SDK 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Novell Linux Desktop 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.2 X86 64 S.u.S.E. Linux Professional 10.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 10.2 X86 64 S.u.S.E. Linux Personal 10.2 S.u.S.E. Linux Personal 10.1 rPath rPath Linux 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Redhat Desktop 3.0 Pardus Linux 2008 0 Pardus Linux 2007 0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux Ethereal Group Ethereal 0.10.14 Ethereal Group Ethereal 0.10.13 Ethereal Group Ethereal 0.10.12 Ethereal Group Ethereal 0.10.11 Ethereal Group Ethereal 0.10.10 Ethereal Group Ethereal 0.10.9 + Gentoo Linux Ethereal Group Ethereal 0.10.8 Ethereal Group Ethereal 0.10.7 Ethereal Group Ethereal 0.10.6 Ethereal Group Ethereal 0.10.5 Ethereal Group Ethereal 0.10.4 Ethereal Group Ethereal 0.10.3 + Mandriva Linux Mandrake 10.0 AMD64 + Mandriva Linux Mandrake 10.0 + Redhat Fedora Core2 + Redhat Fedora Core1 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 Ethereal Group Ethereal 0.10.2 Ethereal Group Ethereal 0.10.1 Ethereal Group Ethereal 0.10 Ethereal Group Ethereal 0.9.16 + Mandriva Linux Mandrake 9.2 amd64 + Mandriva Linux Mandrake 9.2 Ethereal Group Ethereal 0.9.15 Ethereal Group Ethereal 0.9.14 Ethereal Group Ethereal 0.9.13 Ethereal Group Ethereal 0.9.12 Ethereal Group Ethereal 0.9.11 Ethereal Group Ethereal 0.9.9 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 Ethereal Group Ethereal 0.9.8 Ethereal Group Ethereal 0.9.7 Ethereal Group Ethereal 0.9.6 + Conectiva Linux Enterprise Edition 1.0 Ethereal Group Ethereal 0.9.5 Ethereal Group Ethereal 0.9.4 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha Ethereal Group Ethereal 0.9.3 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 alpha + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.0 sparc + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha + Redhat Linux 6.2 sparc + Redhat Linux 6.2 i386 + Redhat Linux 6.2 alpha Ethereal Group Ethereal 0.9.2 Ethereal Group Ethereal 0.9.1 Ethereal Group Ethereal 0.9 Ethereal Group Ethereal 0.8.19 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Avaya Communication Manager 4.0.3 SP1 Avaya Communication Manager 3.1.4 SP2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 2.0.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 + Avaya Communication Manager Server S8700 Avaya Communication Manager 2.0 Avaya Communication Manager 1.3.1 + Avaya Communication Manager Server DEFINITY Server R10 + Avaya Communication Manager Server DEFINITY Server R10 + Avaya Communication Manager Server DEFINITY Server R11 + Avaya Communication Manager Server DEFINITY Server R9 + Avaya Communication Manager Server DEFINITY Server R9 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 + Avaya Communication Manager Server S8700 Avaya Communication Manager 1.1 Avaya Communication Manager 5.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 5.0 SP3 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 5.0 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 Avaya Communication Manager 3.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 + Avaya Communication Manager Server S8700 Avaya Communication Manager 2.2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 2.1 Avaya Aura SIP Enablement Services 5.0 Apple AppleShare IP 6.2
Not Vulnerable:	Wireshark Wireshark 1.0.2

Wireshark 1.0.1 Denial of Service Vulnerability

Wireshark is prone to a denial-of-service vulnerability.

Exploiting this issue may allow attackers to cause crashes and deny service to legitimate users of the application.

This issue affects Wireshark 0.8.19 to 1.0.1.

Wireshark 1.0.1 Denial of Service Vulnerability

Attackers can exploit the issue using readily available network tools.

Wireshark 1.0.1 Denial of Service Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian ethereal-common_0.99.4-5.etch.3_amd64.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-comm on_0.99.4-5.etch.3_amd64.deb


• Debian ethereal-dev_0.99.4-5.etch.3_amd64.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-dev_ 0.99.4-5.etch.3_amd64.deb


• Debian ethereal_0.99.4-5.etch.3_amd64.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal_0.99 .4-5.etch.3_amd64.deb


• Debian tethereal_0.99.4-5.etch.3_amd64.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tethereal_0.9 9.4-5.etch.3_amd64.deb


• Debian tshark_0.99.4-5.etch.3_amd64.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_0.99.4 -5.etch.3_amd64.deb


• Debian wireshark-common_0.99.4-5.etch.3_amd64.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-com mon_0.99.4-5.etch.3_amd64.deb


• Debian wireshark-dev_0.99.4-5.etch.3_amd64.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev _0.99.4-5.etch.3_amd64.deb


• Debian wireshark_0.99.4-5.etch.3_amd64.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.9 9.4-5.etch.3_amd64.deb

Debian Linux 4.0 ia-32

• Debian ethereal-common_0.99.4-5.etch.3_i386.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-comm on_0.99.4-5.etch.3_i386.deb


• Debian ethereal-dev_0.99.4-5.etch.3_i386.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-dev_ 0.99.4-5.etch.3_i386.deb


• Debian ethereal_0.99.4-5.etch.3_i386.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal_0.99 .4-5.etch.3_i386.deb


• Debian tethereal_0.99.4-5.etch.3_i386.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tethereal_0.9 9.4-5.etch.3_i386.deb


• Debian tshark_0.99.4-5.etch.3_i386.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_0.99.4 -5.etch.3_i386.deb


• Debian wireshark-common_0.99.4-5.etch.3_i386.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-com mon_0.99.4-5.etch.3_i386.deb


• Debian wireshark-dev_0.99.4-5.etch.3_i386.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev _0.99.4-5.etch.3_i386.deb


• Debian wireshark_0.99.4-5.etch.3_i386.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.9 9.4-5.etch.3_i386.deb

Debian Linux 4.0 mips

• Debian ethereal-common_0.99.4-5.etch.3_mips.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-comm on_0.99.4-5.etch.3_mips.deb


• Debian ethereal-dev_0.99.4-5.etch.3_mips.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-dev_ 0.99.4-5.etch.3_mips.deb


• Debian ethereal_0.99.4-5.etch.3_mips.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal_0.99 .4-5.etch.3_mips.deb


• Debian tethereal_0.99.4-5.etch.3_mips.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tethereal_0.9 9.4-5.etch.3_mips.deb


• Debian tshark_0.99.4-5.etch.3_mips.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_0.99.4 -5.etch.3_mips.deb


• Debian wireshark-common_0.99.4-5.etch.3_mips.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-com mon_0.99.4-5.etch.3_mips.deb


• Debian wireshark-dev_0.99.4-5.etch.3_mips.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev _0.99.4-5.etch.3_mips.deb


• Debian wireshark_0.99.4-5.etch.3_mips.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.9 9.4-5.etch.3_mips.deb

Debian Linux 4.0 arm

• Debian ethereal-common_0.99.4-5.etch.3_arm.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-comm on_0.99.4-5.etch.3_arm.deb


• Debian ethereal-dev_0.99.4-5.etch.3_arm.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-dev_ 0.99.4-5.etch.3_arm.deb


• Debian ethereal_0.99.4-5.etch.3_arm.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal_0.99 .4-5.etch.3_arm.deb


• Debian tethereal_0.99.4-5.etch.3_arm.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tethereal_0.9 9.4-5.etch.3_arm.deb


• Debian tshark_0.99.4-5.etch.3_arm.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_0.99.4 -5.etch.3_arm.deb


• Debian wireshark-common_0.99.4-5.etch.3_arm.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-com mon_0.99.4-5.etch.3_arm.deb


• Debian wireshark-dev_0.99.4-5.etch.3_arm.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev _0.99.4-5.etch.3_arm.deb


• Debian wireshark_0.99.4-5.etch.3_arm.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.9 9.4-5.etch.3_arm.deb

Debian Linux 4.0 powerpc

• Debian ethereal-common_0.99.4-5.etch.3_powerpc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-comm on_0.99.4-5.etch.3_powerpc.deb


• Debian ethereal-dev_0.99.4-5.etch.3_powerpc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-dev_ 0.99.4-5.etch.3_powerpc.deb


• Debian ethereal_0.99.4-5.etch.3_powerpc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal_0.99 .4-5.etch.3_powerpc.deb


• Debian tethereal_0.99.4-5.etch.3_powerpc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tethereal_0.9 9.4-5.etch.3_powerpc.deb


• Debian tshark_0.99.4-5.etch.3_powerpc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_0.99.4 -5.etch.3_powerpc.deb


• Debian wireshark-common_0.99.4-5.etch.3_powerpc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-com mon_0.99.4-5.etch.3_powerpc.deb


• Debian wireshark-dev_0.99.4-5.etch.3_powerpc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev _0.99.4-5.etch.3_powerpc.deb


• Debian wireshark_0.99.4-5.etch.3_powerpc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.9 9.4-5.etch.3_powerpc.deb

Debian Linux 4.0 sparc

• Debian ethereal-common_0.99.4-5.etch.3_sparc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-comm on_0.99.4-5.etch.3_sparc.deb


• Debian ethereal-dev_0.99.4-5.etch.3_sparc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal-dev_ 0.99.4-5.etch.3_sparc.deb


• Debian ethereal_0.99.4-5.etch.3_sparc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/ethereal_0.99 .4-5.etch.3_sparc.deb


• Debian tethereal_0.99.4-5.etch.3_sparc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tethereal_0.9 9.4-5.etch.3_sparc.deb


• Debian tshark_0.99.4-5.etch.3_sparc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_0.99.4 -5.etch.3_sparc.deb


• Debian wireshark-common_0.99.4-5.etch.3_sparc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-com mon_0.99.4-5.etch.3_sparc.deb


• Debian wireshark-dev_0.99.4-5.etch.3_sparc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev _0.99.4-5.etch.3_sparc.deb


• Debian wireshark_0.99.4-5.etch.3_sparc.deb
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.9 9.4-5.etch.3_sparc.deb

Wireshark 1.0.1 Denial of Service Vulnerability

References:

• Wireshark Homepage (Wireshark)
  
• ASA-2008-392 - wireshark security update (RHSA-2008-0890) (Avaya)
  
• Multiple problems in Wireshark® versions 0.8.19 to 1.0.1 (Wireshark)
  
• RHSA-2008:0890-2 wireshark security update (Red Hat)