PT-2008-1018 · Wireshark · Ethereal+1
Publicado
2008-04-16
·
Atualizado
2024-06-15
·
CVE-2009-3241
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Wireshark versions 0.99.6 through 1.0.8
Wireshark versions 1.2.0 through 1.2.1
tethereal (affected versions not specified)
Description
The issue allows remote attackers to cause problems with the confidentiality, integrity, and availability of protected information. It can be exploited remotely. In the case of Wireshark, the vulnerability in the OpcUa dissector can lead to a denial of service due to memory and CPU consumption via malformed OPCUA Service CallRequest packets.
Recommendations
For Wireshark versions 0.99.6 through 1.0.8, update to a version outside of this range to resolve the issue.
For Wireshark versions 1.2.0 through 1.2.1, update to a version outside of this range to resolve the issue.
For tethereal, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wireshark
Ethereal