Wireshark: Denial of Service

Security Team  Contact Address

Updated March 24, 2008

1.  Gentoo Linux Security Advisory

Version Information

Advisory Reference GLSA 200803-32 / wireshark
Release Date March 24, 2008
Latest Revision March 24, 2008: 01
Impact normal
Exploitable remote
Package Vulnerable versions Unaffected versions Architecture(s)
net-analyzer/wireshark < 0.99.8 >= 0.99.8 All supported architectures

Related bugreports: #212149

Synopsis

Multiple Denial of Service vulnerabilities have been discovered in Wireshark.

2.  Impact Information

Background

Wireshark is a network protocol analyzer with a graphical front-end.

Description

Multiple unspecified errors exist in the SCTP, SNMP, and TFTP dissectors.

Impact

A remote attacker could cause a Denial of Service by sending a malformed packet.

3.  Resolution Information

Workaround

Disable the SCTP, SNMP, and TFTP dissectors.

Resolution

All Wireshark users should upgrade to the latest version:

Code Listing 3.1: Resolution

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.8"

4.  References