CVE-2008-3145 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-3145
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3145

Description: The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/43719 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html ST 1020471 SAID Secunia Advisory: SA31044 Secunia Advisory: SA31085 Secunia Advisory: SA31257 Secunia Advisory: SA31378 Secunia Advisory: SA31687 Secunia Advisory: SA32091 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0890.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:152 GENTOO http://security.gentoo.org/glsa/glsa-200808-04.xml FEDORA CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0237 http://anonsvn.wireshark.org/viewvc/index.py?view=rev&revision=25343 http://www.wireshark.org/security/wnpa-sec-2008-04.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/494859/100/0/threaded BID 30181

Return to the previous page.