PT-2011-2347 · Wireshark+1 · Wireshark+1

Non-Customers · Publicado 2011-01-12 · Atualizado 2017-09-19 · CVE-2011-0444

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.0 through 1.2.13 Wireshark versions 1.4.0 through 1.4.2

Description The issue is related to a buffer overflow in the MAC-LTE dissector. This can be exploited by remote attackers to cause a denial of service, potentially leading to a crash, and may also allow the execution of arbitrary code. The attack vector involves a large number of RARs.

Recommendations For Wireshark versions 1.2.0 through 1.2.13, update to a version outside of this range to resolve the issue. For Wireshark versions 1.4.0 through 1.4.2, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting the use of the MAC-LTE dissector until a patch is available.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-0444

RHSA-2011:0369

RHSA-2011_0369

Produtos afetados

Red Hat

Wireshark

Referências · 35

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/wireshark/cldap.rb · Nota
• https://linux.oracle.com/errata/ELSA-2011-0369.html · Aviso do Fabricante
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5652 · Nota
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5661 · Nota
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5717 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1140 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0713 · Nota
• http://vupen.com/english/advisories/2011/0079 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0270 · Nota
• http://vupen.com/english/advisories/2011/0104 · Nota
• http://securityfocus.com/bid/45775 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2011:007 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2011-0444 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1141 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64624 · Nota