oss-sec mailing list archives

CVE request: Wireshark <1.2.1 Multiple DoS


From: Alex Legler <a3li () gentoo org>
Date: Tue, 21 Jul 2009 12:56:46 +0200

Hi,

in case the vendor has not already requested CVEs for this:

"Wireshark 1.2.1 fixes the following vulnerabilities:

      * The IPMI dissector could overrun a buffer. (Bug 3559) Versions
        affected: 1.2.0 
      * The AFS dissector could crash. (Bug 3564) Versions affected:
        0.9.2 to 1.2.0 
      * The Infiniband dissector could crash on some platforms. Versions
        affected: 1.0.6 to 1.2.0 
      * The Bluetooth L2CAP dissector could crash. (Bug 3572) Versions
        affected: 1.2.0 
      * The RADIUS dissector could crash. (Bug 3578) Versions affected:
        1.2.0 
      * The MIOP dissector could crash. (Bug 3652) Versions affected:
        1.2.0 
      * The sFlow dissector could use excessive CPU and memory. (Bug
        3570) Versions affected: 1.2.0"

http://www.wireshark.org/security/wnpa-sec-2009-04.html

Thanks,
Alex

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: