Wireshark ZigBee ZCL Dissector Infinite Loop Denial of Service Vulnerability
BID:44986
Info
Wireshark ZigBee ZCL Dissector Infinite Loop Denial of Service Vulnerability
| Bugtraq ID: | 44986 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-4301 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 16 2010 12:00AM |
| Updated: | Apr 19 2011 04:14PM |
| Credit: | Fred Fierling |
| Vulnerable: |
Wireshark Wireshark 1.4.1 Wireshark Wireshark 1.4.0 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 10 SP4 SuSE SUSE Linux Enterprise 10 SP3 SuSE openSUSE 11.4 SuSE openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 |
| Not Vulnerable: |
Wireshark Wireshark 1.4.2 |
Discussion
Wireshark ZigBee ZCL Dissector Infinite Loop Denial of Service Vulnerability
Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.
Attackers can exploit this issue to cause the application to enter an infinite loop which may cause denial-of-service conditions.
Wireshark 1.4.0 to 1.4.1 are vulnerable.
Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.
Attackers can exploit this issue to cause the application to enter an infinite loop which may cause denial-of-service conditions.
Wireshark 1.4.0 to 1.4.1 are vulnerable.
Exploit / POC
Wireshark ZigBee ZCL Dissector Infinite Loop Denial of Service Vulnerability
The following exploit is available:
The following exploit is available:
Solution / Fix
Wireshark ZigBee ZCL Dissector Infinite Loop Denial of Service Vulnerability
Solution:
Updates are available; please see the references for details.
Solution:
Updates are available; please see the references for details.
References
Wireshark ZigBee ZCL Dissector Infinite Loop Denial of Service Vulnerability
References:
References:
- Wireshark Homepage (Wireshark)
- wnpa-sec-2010-14 (Wireshark)