PT-2008-1016 · Wireshark+1 · Wireshark+1

Jan Lieskovsky · Publicado 2008-04-16 · Atualizado 2017-09-19 · CVE-2009-2560

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.10.13 through 1.2.0

Description The issue involves multiple unspecified vulnerabilities that allow remote attackers to cause a denial of service, resulting in an application crash. This can occur when a file that records a malformed packet trace is processed by the Bluetooth L2CAP, RADIUS, or MIOP dissector.

Recommendations For Wireshark versions 0.10.13 through 1.2.0, consider disabling the Bluetooth L2CAP, RADIUS, or MIOP dissector as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

BDU:2015-01453

CVE-2009-2560

DSA-1942-1

RHSA-2010:0360

RHSA-2010_0360

Produtos afetados

Red Hat

Wireshark

Referências · 43

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/wireshark_lwres_getaddrbyname.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/wireshark_lwres_getaddrbyname_loop.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3829 · Nota de Segurança
• http://debian.org/security/dsa-1942 · Nota
• https://access.redhat.com/security/cve/CVE-2009-2562 · Nota
• https://access.redhat.com/errata/RHSA-2010:0360 · Nota
• http://secunia.com/advisories/37175 · Aviso do Fabricante
• http://secunia.com/advisories/37477 · Aviso do Fabricante
• http://securityfocus.com/bid/37985 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54019 · Nota
• http://vupen.com/english/advisories/2009/3061 · Aviso do Fabricante
• http://wireshark.org/docs/relnotes/wireshark-1.0.10.html · Nota
• https://security-tracker.debian.org/tracker/CVE-2009-2560 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3241 · Nota de Segurança
• http://vupen.com/english/advisories/2009/1970 · Aviso do Fabricante