PT-2008-1016 · Wireshark+1 · Wireshark+1

Jan Lieskovsky · Published 2008-04-16 · Updated 2017-09-19 · CVE-2009-2560

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.10.13 through 1.2.0

Description The issue involves multiple unspecified vulnerabilities that allow remote attackers to cause a denial of service, resulting in an application crash. This can occur when a file that records a malformed packet trace is processed by the Bluetooth L2CAP, RADIUS, or MIOP dissector.

Recommendations For Wireshark versions 0.10.13 through 1.2.0, consider disabling the Bluetooth L2CAP, RADIUS, or MIOP dissector as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2015-01453

CVE-2009-2560

DSA-1942-1

RHSA-2010:0360

RHSA-2010_0360

Affected Products

Red Hat

Wireshark

References · 43

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/wireshark_lwres_getaddrbyname.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/wireshark_lwres_getaddrbyname_loop.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3829 · Security Note
• http://secunia.com/advisories/37175 · Vendor Advisory
• http://secunia.com/advisories/37477 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3061 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-2560 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3241 · Security Note
• http://vupen.com/english/advisories/2009/1970 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-2560 · Vendor Advisory
• http://secunia.com/advisories/35884 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:194 · Vendor Advisory
• http://securityfocus.com/bid/35748 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2562 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3550 · Security Note