wireshark: multiple vulnerabilities [LWN.net]

Package(s):

wireshark

CVE #(s):

CVE-2007-3390 CVE-2007-3392 CVE-2007-3393

Created:

June 28, 2007

Updated:

February 27, 2008

Description:

The wireshark network traffic analyzer has three vulnerabilities that can be used to create a denial of service. These include off-by-one overflows in the iSeries dissector, vulnerabilities in the MMS and SSL dissectors that can cause an infinite loop and an off-by-one overflow in the DHCP/BOOTP dissector.

Alerts:

SuSE	SUSE-SR:2007:015	2007-08-03
Red Hat	RHSA-2008:0059-01	2008-01-21
Red Hat	RHSA-2007:0709-02	2007-11-15
Red Hat	RHSA-2007:0710-04	2007-11-07
Gentoo	200708-12	2007-08-16
Fedora	FEDORA-2007-628	2007-07-09
rPath	rPSA-2007-0137-1	2007-07-11
Mandriva	MDKSA-2007:145	2007-07-10
Fedora	FEDORA-2007-0982	2007-07-09
Debian	DSA-1322-1	2007-06-27

(Log in to post comments)