GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Mon Mar 24, 2008 9:26 pm Post subject: [ GLSA 200803-32 ] Wireshark: Denial of Service |
|
|
Gentoo Linux Security Advisory
Title: Wireshark: Denial of Service (GLSA 200803-32)
Severity: normal
Exploitable: remote
Date: March 24, 2008
Bug(s): #212149
ID: 200803-32
Synopsis
Multiple Denial of Service vulnerabilities have been discovered in
Wireshark.
Background
Wireshark is a network protocol analyzer with a graphical front-end.
Affected Packages
Package: net-analyzer/wireshark
Vulnerable: < 0.99.8
Unaffected: >= 0.99.8
Architectures: All supported architectures
Description
Multiple unspecified errors exist in the SCTP, SNMP, and TFTP
dissectors.
Impact
A remote attacker could cause a Denial of Service by sending a
malformed packet.
Workaround
Disable the SCTP, SNMP, and TFTP dissectors.
Resolution
All Wireshark users should upgrade to the latest version:
Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.8" |
References
CVE-2008-1070
CVE-2008-1071
CVE-2008-1072
Last edited by GLSA on Tue Oct 30, 2012 4:26 am; edited 2 times in total |
|