wireshark: multiple vulnerabilities [LWN.net]

Package(s):

wireshark

CVE #(s):

CVE-2011-4100 CVE-2011-4101 CVE-2011-4102

Created:

November 2, 2011

Updated:

November 23, 2011

Description:

Wireshark suffers from two denial-of-service vulnerabilities, one in the CSN.1 dissector (CVE-2011-4100) and one in the Infiniband dissector (CVE-2011-4101). There is also a buffer overflow in the ERF file reader (CVE-2011-4102) that, presumably, could be exploited to execute arbitrary code.

Alerts:

Debian	DSA-2351-1	2011-11-21
Mandriva	MDVSA-2011:164	2011-11-02
Red Hat	RHSA-2012:0509-01	2012-04-23
Scientific Linux	SL-wire-20120423	2012-04-23
Oracle	ELSA-2012-0509	2012-04-23
CentOS	CESA-2012:0509	2012-04-24
Oracle	ELSA-2013-0125	2013-01-12
Scientific Linux	SL-wire-20130116	2013-01-16

(Log in to post comments)