Wireshark OpenSafety Dissector Denial of Service Vulnerability
BID:49524
Info
Wireshark OpenSafety Dissector Denial of Service Vulnerability
| Bugtraq ID: | 49524 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2011-3484 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 08 2011 12:00AM |
| Updated: | Sep 28 2011 08:30PM |
| Credit: | Wireshark |
| Vulnerable: |
Wireshark Wireshark 1.6.1 Wireshark Wireshark 1.6 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 |
| Not Vulnerable: |
Wireshark Wireshark 1.6.2 |
Discussion
Wireshark OpenSafety Dissector Denial of Service Vulnerability
Wireshark is prone to a denial-of-service vulnerability because it fails to properly handle specially crafted OpenSafety packets.
Exploiting this issue may allow attackers to cause the application to crash.
Wireshark 1.6.0 to 1.6.1 are vulnerable.
Wireshark is prone to a denial-of-service vulnerability because it fails to properly handle specially crafted OpenSafety packets.
Exploiting this issue may allow attackers to cause the application to crash.
Wireshark 1.6.0 to 1.6.1 are vulnerable.
Exploit / POC
Wireshark OpenSafety Dissector Denial of Service Vulnerability
Attackers can exploit the issue using readily available network tools.
A sample '.pcap' file is available. Please see the references for information.
Attackers can exploit the issue using readily available network tools.
A sample '.pcap' file is available. Please see the references for information.
Solution / Fix
Wireshark OpenSafety Dissector Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2011 x86_64
Mandriva Linux Mandrake 2011
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2011 x86_64
-
Mandriva dumpcap-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64wireshark-devel-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64wireshark1-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva rawshark-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva tshark-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva wireshark-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva wireshark-tools-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/
Mandriva Linux Mandrake 2011
-
Mandriva dumpcap-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libwireshark-devel-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libwireshark1-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva rawshark-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva tshark-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva wireshark-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva wireshark-tools-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/
References
Wireshark OpenSafety Dissector Denial of Service Vulnerability
References:
References:
- Wireshark Homepage (Wireshark)
- Wireshark OpenSafety dissector vulnerability (Wireshark)
- Wireshark-bugs: [Wireshark-bugs] [Bug 6138] New: Buildbot crash output: randpkt- (Wireshark)