GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Sun Sep 13, 2009 8:26 pm Post subject: [ GLSA 200909-16 ] Wireshark: Denial of Service |
|
|
Gentoo Linux Security Advisory
Title: Wireshark: Denial of Service (GLSA 200909-16)
Severity: normal
Exploitable: remote
Date: September 13, 2009
Bug(s): #278564
ID: 200909-16
Synopsis
Multiple vulnerabilities have been discovered in Wireshark which allow for
Denial of Service.
Background
Wireshark is a versatile network protocol analyzer.
Affected Packages
Package: net-analyzer/wireshark
Vulnerable: < 1.2.1
Unaffected: >= 1.2.1
Architectures: All supported architectures
Description
Multiple vulnerabilities were discovered in Wireshark:
- A
buffer overflow in the IPMI dissector related to an array index error
(CVE-2009-2559). - Multiple unspecified vulnerabilities in the
Bluetooth L2CAP, RADIUS, and MIOP dissectors (CVE-2009-2560). - An unspecified vulnerability in the sFlow dissector
(CVE-2009-2561). - An unspecified vulnerability in the AFS
dissector (CVE-2009-2562). - An unspecified vulnerability in the
Infiniband dissector when running on unspecified platforms
(CVE-2009-2563).
Impact
A remote attacker could exploit these vulnerabilities by sending
specially crafted packets on a network being monitored by Wireshark or
by enticing a user to read a malformed packet trace file to cause a
Denial of Service.
Workaround
There is no known workaround at this time.
Resolution
All Wireshark users should upgrade to the latest version:
Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.2.1" |
References
CVE-2009-2559
CVE-2009-2560
CVE-2009-2561
CVE-2009-2562
CVE-2009-2563
Last edited by GLSA on Sun Nov 22, 2009 4:29 am; edited 1 time in total |
|