wireshark: denial of service [LWN.net]

Package(s):

wireshark

CVE #(s):

CVE-2011-3266

Created:

September 19, 2011

Updated:

September 21, 2011

Description:

From the CVE entry:

The proto_tree_add_item function in Wireshark 1.6.1, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.

Alerts:

openSUSE	openSUSE-SU-2011:1263-1	2011-11-21
SUSE	SUSE-SU-2011:1262-1	2011-11-21
openSUSE	openSUSE-SU-2011:1142-1	2011-10-18
Gentoo	201110-02	2011-10-09
Fedora	FEDORA-2011-12423	2011-09-09
Fedora	FEDORA-2011-12403	2011-09-09

(Log in to post comments)