wireshark: denial of service [LWN.net]

Package(s):

wireshark

CVE #(s):

CVE-2013-3561

Created:

June 7, 2013

Updated:

June 12, 2013

Description:

From the CVE database entry:

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.

Alerts:

Mageia	MGASA-2013-0168	2013-06-06
openSUSE	openSUSE-SU-2013:1084-1	2013-06-26
openSUSE	openSUSE-SU-2013:1086-1	2013-06-26
Gentoo	GLSA 201308-05:02	2013-08-30

(Log in to post comments)