PT-2008-5894 · Wireshark+1 · Wireshark+1

Published 2008-10-22 · Updated 2018-10-11 · CVE-2008-4681

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.99.7 through 1.0.3

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash or abort, via unknown packets. This is related to an unspecified vulnerability in the Bluetooth RFCOMM dissector.

Recommendations For Wireshark versions 0.99.7 through 1.0.3, update to a version that contains a fix for this issue to prevent potential denial of service attacks.

Fix

DoS

RCE

Weakness Enumeration

CWE-399

CWE-20

Related Identifiers

CVE-2008-4681

RHSA-2009:0313

RHSA-2009_0313

Affected Products

Red Hat

Wireshark

References · 33

• http://mandriva.com/security/advisories?name=MDVSA-2008:215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4681 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2008-4681 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-4681 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0313.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-4681 · Vendor Advisory
• http://securityfocus.com/bid/31838 · Patch
• http://wireshark.org/security/wnpa-sec-2008-06.html · Vendor Advisory
• http://secunia.com/advisories/32355 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2009-0599 · Note
• https://access.redhat.com/security/cve/CVE-2009-0600 · Note
• https://access.redhat.com/security/cve/CVE-2008-5285 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46014 · Note
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2922 · Note
• https://access.redhat.com/security/cve/CVE-2008-4682 · Note